Container Security Basics

Summary

Running containers as a non-root user, scanning images for known vulnerabilities, and minimizing base image size — a container isn't automatically secure just because it's isolated.

• 1Modify a Dockerfile to run as a non-root user instead of the default root.
• 2Scan an image using a free tool (like Trivy) and review the vulnerability report.
• 3Learn why a smaller base image (e.g. Alpine) reduces the attack surface, not just image size.