3 years ago

Category: Data, Docker, encryption

On my first security scan, this was the missing thing in my infrastructure. According to MDN, Subresource Integrity (SRI) is a security feature that enables browsers to verify that resources they fetch (for example, from a CDN) are delivered without unexpected manipulation.

In your web application in your bundler, implement subresource integrity.

Which this you can install the packages for your container by apt, pkg, or some other package manager.

In your docker registry, implement the vulnerability scanner, which can scan your docker container periodically with identified vulnerabilities.