[{"data":1,"prerenderedAt":28},["ShallowReactive",2],{"blog-tag-en-container-security":3},[4,16],{"path":5,"title":6,"description":7,"date":8,"tags":9},"\u002Fblog\u002Fen\u002Fk3s-container-image-security-supply-chain-checklist","'Scanned' Is Not a Production Clearance Certificate: K3s Container Image Security From Signing to Admission Control","Container security guidelines often stop at 'we run a scanner.' This guide walks through the practical checklist you need to pass before production in K3s: minimal base images, vulnerability scanning, SBOM generation, signing, and admission control.","2026-08-24",[10,11,12,13,14,15],"k3s","kubernetes","container-security","image-scanning","sbom","supply-chain-security",{"path":17,"title":18,"description":19,"date":20,"tags":21},"\u002Fblog\u002Fen\u002Fdocker-security-scanning-best-practices","Docker Container Security: Scanning and Vulnerability Management","A practical guide to integrating vulnerability scanning into your container ci-cd pipeline. Compare Trivy, Snyk, and Grype, implement shift-left security, and build defense-in-depth with Harbor.","2026-05-27",[22,23,24,25,26,12,27],"docker","security","vulnerability-scanning","trivy","snyk","devsecops",1787649527054]