CIS Docker Benchmark

Ensure that Node Certificates are Rotated as Appropriate
Profile Applicability: Level 1 Description: Node certificates in a Docker Swarm should be rotated periodically to ensure that they are up to date an...
Tue, 29 Apr, 2025 at 6:32 AM
Ensure that a user for the container has been created
Profile Applicability: Level 1 Description: A dedicated user should be created for running Docker containers. This ensures that containers run with t...
Tue, 29 Apr, 2025 at 6:38 AM
Ensure that the Docker socket is not mounted inside any containers
 Profile Applicability: Level 1  Description: Mounting the Docker socket inside containers allows the container to interact with the Docker daemon, p...
Tue, 29 Apr, 2025 at 6:39 AM
Ensure that Image Sprawl is Avoided
Profile Applicability: Level 1 Description: Docker image sprawl occurs when a large number of outdated or unused images accumulate, leading to ineff...
Tue, 29 Apr, 2025 at 6:44 AM
Ensure that containers use only trusted base images
Profile Applicability: Level 1  Description: Docker containers should only use base images from trusted and verified sources, such as official reposi...
Tue, 29 Apr, 2025 at 6:45 AM
Ensure that Container Sprawl is Avoided
Profile Applicability: Level 1 Description: Container sprawl occurs when too many unused or unnecessary containers are running or lingering on the s...
Tue, 29 Apr, 2025 at 6:49 AM
Ensure that unnecessary packages are not installed in the container
Profile Applicability: Level 1 Description: Containers should only include the necessary packages required for their functionality. Installing unnece...
Tue, 29 Apr, 2025 at 6:49 AM
Ensure images are scanned and rebuilt to include security patches
Profile Applicability: Level 1 Description: Docker images should be regularly scanned for security vulnerabilities. Once vulnerabilities are detected...
Tue, 29 Apr, 2025 at 6:54 AM
Ensure Content Trust for Docker is Enabled
Profile Applicability: Level 2  Description: Content trust ensures that images pulled from a Docker registry are digitally signed, providing the abil...
Tue, 29 Apr, 2025 at 6:59 AM
Ensure that HEALTHCHECK instructions have been added to container images
Profile Applicability: Level 1 Description: The HEALTHCHECK instruction should be added to Docker container images to ensure that health checks are e...
Tue, 29 Apr, 2025 at 7:04 AM