Securing Container Images Using OpenSCAP and Atomic

Introduction

Trusting your runtime containers is crucial for widespread adoption of containers for both new systems and legacy migrations into a containerized environment. Having a secure supply chain and understanding the provenance have your container images can go a long way reducing security concerns, but it is equally important does its own security validation by looking for vulnerabilities and remediating them when found. One of the ways this can be accomplished is by the introduction of automated scanning and remediation tools…