Feature/lab7

[Sarantsev]

Goal

Analyze container image security for bkimminich/juice-shop:v19.0.0 using Docker Scout and Dockle,
audit Docker host configuration against CIS Docker Benchmark, and compare three deployment
security profiles (default / hardened / production).
## Changes

• labs/submission7.md — full vulnerability analysis, CIS benchmark results, and deployment security comparison
• labs/lab7/scanning/scout-cves.txt — Docker Scout CVE scan output (118 vulns: 11 CRITICAL, 65 HIGH)
• labs/lab7/scanning/dockle-results.txt — Dockle configuration assessment output
• labs/lab7/hardening/docker-bench-results.txt — CIS Docker Benchmark audit output (105 checks)
• labs/lab7/analysis/deployment-comparison.txt — three-profile deployment comparison output

Testing

• Docker Scout CVE scan executed locally against bkimminich/juice-shop:v19.0.0
• Dockle configuration scan executed via Docker container
• CIS Docker Benchmark run via docker/docker-bench-security
• All three container profiles deployed and verified (HTTP 200 on ports 3001/3002/3003)
• Resource usage and security configurations captured via docker stats and docker inspect

Artifacts & Screenshots

• labs/lab7/scanning/scout-cves.txt — 118 vulnerabilities found (11 CRITICAL, 65 HIGH, 30 MEDIUM)
• labs/lab7/hardening/docker-bench-results.txt — 41 PASS, 42 WARN, 0 FAIL
• labs/lab7/analysis/deployment-comparison.txt — functionality test, resource usage, security config diff

Checklist

• PR has a clear, descriptive title
• Documentation is updated
• No secrets or sensitive data
• Task 1 done — Advanced Image Security & Configuration Analysis
• Task 2 done — Docker Security Benchmarking & Assessment
• Task 3 done — Secure Container Deployment Analysis