SG page 98: Regardless of the technology platform, container security includes: • Assuring the security of the underlying physical infrastructure • Assuring the security of the management plane • Properly securing the image repository • Building security into the tasks/code running inside the container

Security Guidance v4.0 >>p.98 Regardless of the technology platform, container security includes: • Properly securing the image repository. The image repository should be in a secure location with appropriate access controls configured. This is both to prevent loss or unapproved modification of container images and definition files, as well as to forestall leaks of sensitive data through unapproved access to the files. Containers run so easily that it’s also important that images are only able to deploy in the right security context.