Container Image Security
Complete workflow for securing container images: scan, analyze, harden, verify.
Workflow Overview
Import base image to ACR → Build → Scan with Trivy → Analyze CVEs → Harden Dockerfile → Rebuild → Re-scan → Verify
1. Import Base Images to ACR
Avoid Docker Hub rate limits by importing base images into your private ACR. Azure's infrastructure pulls on your behalf — no Docker Hub auth needed.
# Import a public image into ACR
az acr import --name
[Description truncada. Veja o README completo no GitHub.]