← Back to all products

Container Security Toolkit

$39

Dockerfile linting, image scanning configs, runtime security policies, and Kubernetes admission controllers.

📁 21 files🏷 v1.0.0
JSONMarkdownShellYAMLDockerKubernetesGitHub ActionsCI/CD

📄 Product Preview

Try the interactive reader and demo tools below, or get the full product with all content unlocked.

📖 Interactive Reader (Free Preview) ⚙ Try Demo Tools 📦 Download Free Sample

📁 File Structure 21 files

container-security-toolkit/ ├── LICENSE ├── README.md ├── dockerfiles/ │ ├── go-secure.Dockerfile │ ├── java-secure.Dockerfile │ ├── node-secure.Dockerfile │ └── python-secure.Dockerfile ├── guides/ │ └── container-security-guide.md ├── policies/ │ ├── kyverno/ │ │ ├── require-image-digest.yaml │ │ ├── require-non-root.yaml │ │ └── require-resource-limits.yaml │ └── opa/ │ ├── dockerfile-policy.rego │ └── k8s-pod-security.rego ├── runtime/ │ ├── apparmor-profile │ └── seccomp-profile.json ├── scanners/ │ ├── grype.yaml │ ├── hadolint.yaml │ └── trivy.yaml ├── scripts/ │ ├── audit-runtime.sh │ └── scan-image.sh └── workflows/ └── container-security.yml

📖 Documentation Preview README excerpt

Container Security Toolkit

Harden, scan, and enforce security policies across your container infrastructure.

Datanest Digital — datanest.dev

What You Get

  • 4 Hardened Dockerfiles — Multi-stage builds for Python, Node.js, Go, and Java with non-root users, minimal base images, and security best practices
  • 3 Scanner Configurations — Pre-tuned configs for Trivy, Hadolint, and Grype vulnerability scanners
  • 2 OPA Policies — Rego policies for Dockerfile best practices and Kubernetes pod security
  • 3 Kyverno Policies — Cluster policies enforcing non-root, resource limits, and image digests
  • 2 Runtime Profiles — Seccomp and AppArmor profiles restricting dangerous syscalls
  • 2 Automation Scripts — Image scanning and runtime auditing scripts for CI/CD
  • 1 GitHub Actions Workflow — Complete container security pipeline
  • 1 Comprehensive Guide — Container security from build to runtime

File Structure


container-security-toolkit/
├── README.md
├── manifest.json
├── LICENSE
├── dockerfiles/
│   ├── python-secure.Dockerfile
│   ├── node-secure.Dockerfile
│   ├── go-secure.Dockerfile
│   └── java-secure.Dockerfile
├── scanners/
│   ├── trivy.yaml
│   ├── hadolint.yaml
│   └── grype.yaml
├── policies/
│   ├── opa/
│   │   ├── dockerfile-policy.rego
│   │   └── k8s-pod-security.rego
│   └── kyverno/
│       ├── require-non-root.yaml
│       ├── require-resource-limits.yaml
│       └── require-image-digest.yaml
├── runtime/
│   ├── seccomp-profile.json
│   └── apparmor-profile
├── scripts/
│   ├── scan-image.sh
│   └── audit-runtime.sh
├── workflows/
│   └── container-security.yml
└── guides/
    └── container-security-guide.md

Getting Started

1. Build a Hardened Image



*... continues with setup instructions, usage examples, and more.*

📄 Code Sample .sh preview

scripts/audit-runtime.sh#!/usr/bin/env bash # ============================================================================ # Container Runtime Security Auditor # Audits running containers for security misconfigurations # ============================================================================ # Datanest Digital — datanest.dev # ============================================================================ set -euo pipefail RED='\033[0;31m' GREEN='\033[0;32m' YELLOW='\033[1;33m' BLUE='\033[0;34m' CYAN='\033[0;36m' NC='\033[0m' PASS=0 WARN=0 FAIL=0 log_pass() { echo -e "${GREEN}[PASS]${NC} $*"; ((PASS++)); } log_warn() { echo -e "${YELLOW}[WARN]${NC} $*"; ((WARN++)); } log_fail() { echo -e "${RED}[FAIL]${NC} $*"; ((FAIL++)); } log_info() { echo -e "${BLUE}[INFO]${NC} $*"; } usage() { cat <<EOF Usage: $(basename "$0") [options] Audit running containers and Kubernetes pods for security misconfigurations. Options: -n, --namespace NS Kubernetes namespace to audit (default: all) -c, --container ID Audit a specific Docker container -m, --mode MODE Mode: docker, kubernetes, or auto (default: auto) -o, --output FILE Output report to file (JSON) -h, --help Show this help Examples:
Buy Now — $39 Back to Products