Lab 7 — Container Security: Image Scanning & Deployment Hardening

[Boogyy]

Goal

Complete Lab 7 by performing container security analysis, including vulnerability scanning, host benchmarking, and deployment hardening comparison.

Changes

• Performed vulnerability scanning using Docker Scout and Snyk
• Conducted configuration assessment using Dockle
• Deployed and compared three container security profiles (default, hardened, production)
• Added scan outputs to labs/lab7/:
  • scanning results (Scout, Snyk, Dockle)
  • deployment comparison results

Testing

• Successfully scanned the image using Docker Scout and Snyk
• Verified container configurations using Dockle
• Deployed three container profiles and confirmed functionality via HTTP (all returned 200)
• Compared resource usage and security settings using docker stats and docker inspect

Artifacts & Screenshots

• labs/lab7/scanning/ — vulnerability and configuration scan outputs
• labs/lab7/hardening/ — docker benchmark result (platform limitation documented)
• labs/lab7/analysis/ — deployment comparison results

---

Checklist

• PR title is clear and descriptive
• Documentation updated if needed
• No secrets or large temporary files committed