🔐 Docker Container for Penetration Testing & Security
Auditing & Hardening script for Kubernetes
CentOS based Docker Security Architecture
Local-first AI agent framework with 5-layer container hardening. Runs Ollama models offline behind iptables, DNS sinkhole, seccomp, and read-only rootfs. No cloud, no telemetry, no API keys.
Ecumene — forge -> verify -> act (Forerunner-named homelab agent runtime)
What a container image is made of and how to harden it - an annotated, verifiable reference implementation of the DISA Container Image Creation and Deployment Guide V2R0.6. OpenSCAP STIG + tailoring file, hadolint, TruffleHog, Trivy/Grype, hardened Kubernetes manifests.
Docker Image Hardening Lab focused on container security best practices using vulnerable vs hardened Dockerfiles, multi-stage builds, Alpine optimization, Trivy vulnerability scanning, Docker Bench for Security, non-root containers, and image size reduction.
A playground repository for testing shift-left security scans (Trivy) on Go and Terraform using GitHub Actions
Enterprise-grade hardened container images with CIS L1-aligned security controls, supply-chain security, runtime hardening and automated lifecycle management.
To associate your repository with the container-hardening topic, visit your repo's landing page and select "manage topics."