How deeply does Software Security for Developers cover container image?

Identifies insecure image examples and points to Dockerfiles and cloud-native buildpacks, without detailing image-building procedures.

Container image

As explained in Software Security for Developers

A container image is an immutable package containing an application and the files, metadata, and runtime components needed to execute it in a container.

A container image packages an application for execution in a container, including the files, metadata, and runtime components it needs. In Kubernetes, it is the deployable application artifact that must be created securely before deployment. section 3.2

Creating an application container is straightforward, but common examples can produce insecure images. Secure image creation is a developer responsibility, while platform engineers provide and secure the Kubernetes cluster. section 3.2 section 3.5

Secure image work connects to the surrounding Kubernetes workflow:

Create the image with secure Dockerfile or cloud-native buildpack practices. section 3.2
Deploy it with Kubernetes manifests that follow security best practices. section 3.2
Treat the image and deployment configuration as separate responsibilities from cluster installation and security. section 3.5

How Software Security for Developers covers it

Cover of Software Security for Developers

liveBook manning.com

Read Software Security for Developers on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Learn Docker in a Month of Lunches, Second EditionA container image is a packaged filesystem and metadata bundle containing an application's content, dependencies, and instructions for starting it in a container.
liveBook manning.com

Podman in Action: Secure, rootless containers for Kubernetes, microservices, and moreA packaged filesystem and application artifact containing the code, dependencies, and runtime requirements needed to create a container.
liveBook manning.com

Road to KubernetesA container image is an immutable package containing an application, its dependencies, and the filesystem configuration needed to create a container.
liveBook manning.com

Data Pipelines with Apache Airflow, Second EditionA container image is a packaged filesystem and application specification from which a container can be created.
liveBook manning.com

Rust Servers, Services, and AppsA Docker image is an immutable package containing a filesystem, metadata, and application dependencies from which containers can be created.
liveBook manning.com

Kubernetes in Action, Second EditionA container image is an immutable package containing a container's filesystem, application, and runtime dependencies from which containers can be created.
liveBook manning.com

Build Python Web Apps with StreamlitA container image is an immutable package containing an application and the files and metadata needed to create its container runtime.
liveBook manning.com

.NET in Action, Second EditionA container image is an immutable package containing an application, its dependencies, and the filesystem data needed to create containers.
liveBook manning.com

Shipping Go: Develop, deliver, discuss, design, and go againA container image is a packaged, immutable filesystem and metadata bundle from which a container can be created.
liveBook manning.com

Designing Deep Learning Systems: A guide for software engineersA Docker image is an immutable package containing filesystem layers and metadata used to create containers.
liveBook manning.com

Bootstrapping Microservices, Second Edition: With Docker, Kubernetes, GitHub Actions, and TerraformA Docker image is an immutable package containing the code, dependencies, assets, and resources needed to instantiate a containerized application or service.
liveBook manning.com

Google Anthos in ActionA Docker image is an immutable package containing a filesystem and metadata used to create Docker containers.
liveBook manning.com

GitHub Actions in Action: Continuous integration and delivery for DevOpsA container image is a packaged filesystem and metadata used to create a container execution environment.
liveBook manning.com

Server-Side WebAssemblyA container image is an immutable package containing an application, its dependencies, and the filesystem metadata needed to create a container.
liveBook manning.com

LLMs in ProductionA Docker image is an immutable package containing a filesystem and metadata used to create Docker containers.
liveBook manning.com

Kubernetes for DevelopersA Docker image is an immutable package containing a filesystem, application code, dependencies, and metadata used to create a Docker container.
liveBook manning.com

Spring in Action, Sixth EditionA container image is an immutable package containing an application's filesystem, runtime dependencies, metadata, and startup configuration for creating containers.
liveBook manning.com

Build Financial Software with Generative AI (From Scratch)A Docker image is a read-only package containing the filesystem, application code, and dependencies used to create containers.
liveBook manning.com

gRPC Microservices in GoA Docker image is a packaged, immutable filesystem and metadata template used to create Docker containers.
liveBook manning.com

Quarkus in ActionA container image is a packaged filesystem and metadata bundle from which a container can be created and run.
liveBook manning.com

Akka in Action, Second EditionA Docker image is an immutable package containing an application, its dependencies, and the metadata needed to create a Docker container.
liveBook manning.com

Essential TypeScript 5, Third EditionA Docker image is an immutable package containing the files, metadata, and configuration needed to create a Docker container.
liveBook manning.com

Just Use Postgres!A container image is an immutable package containing a filesystem and configuration from which an isolated container runtime is created.
liveBook manning.com

Machine Learning Platform EngineeringA Docker image is a packaged, executable filesystem containing an application and its dependencies for creating containers.

Compare how 25 books explain container image →

Related concepts

Dockerfileproduced by · A Dockerfile is a text file containing declarative instructions for building a container image and specifying its contents and runtime metadata.
containerproduces · A software container is an isolated execution environment that packages an application and its dependencies while sharing the host operating system kernel.
image layerhas part · An image layer is an immutable filesystem change set that contributes to a layered container image and may be stored, cached, or shared independently.
docker buildproduced by · docker build is a Docker command that constructs a container image from a Dockerfile and its build context.
from instructionused by · The FROM instruction is a Dockerfile directive that selects the base image or empty filesystem for a container image build stage.
dependency managementaddresses · Dependency management is the practice of declaring, resolving, versioning, obtaining, updating, and controlling the software components required by a project.

This explainer was generated by Manning's knowledge graph from the text of Software Security for Developers. The section links point to the parts of the book it draws on.