security

Secure development environments are the backbone of modern software teams, ensuring speed and innovation don’t come at the cost of vulnerabilities, inefficiencies, or eroded trust.

Learn how Docker Hub and Docker Scout can help development teams ensure a more secure and compliant software supply chain.

We look at Docker’s 2024 milestones and innovations in security, AI, and more, as well as how we helped teams build, test, and deploy more easily and quickly than ever.

Discover how Docker Scout integrates with secure container repositories to ensure vulnerability-free and compliant images in highly secure environments.

Learn about new features in Docker Desktop 4.36, including Desktop Settings Management and improvements to Enhanced Container Isolation and WSL 2.

Learn how Docker Desktop’s sign-in enforcement and single sign-on (SSO) features work together to enhance security and streamline user management, ensuring proper authentication and access control while unlocking Docker’s full suite of tools.

Docker Desktop 4.35 includes organization access tokens, a new Docker product home page, terminal enhancements, Docker Desktop for Red Hat Enterprise Linux, and improved performance on macOS.

Signing into Docker Desktop unlocks advanced features and integrations, enabling developers and admins to fully leverage Docker’s cloud-native tools for enhanced productivity, security, and scalability.

Docker organization access tokens let customers manage access that each token has, instead of managing users and their placement within the organization.

In April 2021, GitHub announced changes to their security token format that significantly enhanced security. The improvement leveraged two straightforward techniques: a fixed signature in the generated token and a checksum – both of which are highly effective in eliminating false positives (noise) and false negatives (missed findings). Microsoft also implements these techniques widely in […] The post Common annotated security keys appeared first on Engineering@Microsoft.

We debunk common Docker myths and explain the capabilities and benefits of this widely used container technology.

Dive into the “Secure by Design” approach essential for AI systems, focusing on embedding security features from the start to fortify AI against emerging threats.

We're excited to launch the general availability for two significant updates: the Docker Desktop MSI installer and a new sign-in enforcement alternative. These updates aim to streamline administration, improve security, and ensure users can take full advantage of Docker Business subscription features.

The Docker team announces the deprecation of password logins on the Docker CLI when Single Sign-On (SSO) is enforced, effective September 16, 2024.

We explore Zero Trust security and walk through several strategies for implementing Zero Trust within a Docker Desktop-based development environment.

The Docker team introduces Docker Scout health scores to help quickly evaluate image health and simplify software security for developers.

Find out how CARIAD, an automotive software and technology company, configures Docker for security and compliance using Docker Single Sign-On, Image Access Management, and Windows Subsystem for Linux 2.

With a Docker Business subscription, Docker customers have access to granular controls and a full product suite to help them maintain compliance and improve security.