Securing applications with secure Docker images

I've covered many aspects of securing containers at runtime, but the Docker platform provides security in depth that starts before any containers are run. You can start securing your application by securing the image that packages your application.

Building minimal images

It's unlikely that an attacker can compromise your application and gain access to the container, but you should build your image to mitigate the damage if that happens. Building a minimal image is key. The ideal Docker image should contain nothing more than the application and the dependencies it needs to run.

This is more difficult to achieve for Windows applications than Linux apps. A Docker image...