Dockerfile linting, image scanning configs, runtime security policies, and Kubernetes admission controllers.