Docker announces significant upgrades to its subscription plans, delivering more value, flexibility, and tools for customers of all sizes.
Products
Deprecation of Password Logins on CLI with Docker SSO Enforcement
The Docker team announces the deprecation of password logins on the Docker CLI when Single Sign-On (SSO) is enforced, effective September 16, 2024.
Zero Trust and Docker Desktop: An Introduction
We explore Zero Trust security and walk through several strategies for implementing Zero Trust within a Docker Desktop-based development environment.
Docker Best Practices: Understanding the Differences Between ADD and COPY Instructions in Dockerfiles
What are Docker ADD/COPY instructions and when should you use them? We explain the differences between the ADD and COPY instructions in Dockerfiles, including when to use each based on security, functionality, and build context.
Docker Scout Health Scores: Security Grading for Container Images in Your Docker Hub Repo
The Docker team introduces Docker Scout health scores to help quickly evaluate image health and simplify software security for developers.
Docker Desktop 4.33: GA Releases of Docker Debug and Docker Build Checks Plus Enhanced Configuration Integrity Checks
Docker Desktop 4.33 is packed with powerful new features designed to elevate your container development experience. Docker Desktop 4.33 includes GA releases of Docker Debug and Docker Build checks, and significant UX improvements to the Configuration integrity check.
Introducing Docker Build Checks: Optimize Dockerfiles with Best Practices
Find out how the newly released Docker Build checks help your team learn and follow best practices for building container images.
Empowering Developers with Docker: Simplifying Compliance and Enhancing Security for SOC 2, ISO 27001, FedRAMP, and More
With a Docker Business subscription, Docker customers have access to granular controls and a full product suite to help them maintain compliance and improve security.
Docker Security Advisory: AuthZ Plugin Bypass Regression in Docker Engine
Certain versions of Docker Engine have a security vulnerability that could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low. This advisory outlines the issue, identifies the affected versions, and provides remediation steps for impacted users.