Mohammad-Ali A'RÂBI

@MohammadAliEN

Software Engineer 💻 | Author of Docker and Kubernetes Security 📘 | @Docker Captain 🐳 | Mathematician 🔮 | Follow for Docker and DevSecOps

Freiburg im Breisgau, Germany

ContainerSecurity.dev

Joined October 2018

527 Following

899 Followers

Replies Reposts Media

Pinned
Mohammad-Ali A'RÂBI
@MohammadAliEN
Oct 5, 2025
🚀 My book “Docker and Kubernetes Security” is out! 292 pages · 10 chapters · 2 years 📘 Ebook + free chapter + Amazon links → DockerSecurity.io 📦 Amazon: 🇺🇸 amzn.to/48hFi8C 🇩🇪 amzn.to/4o14uoG 🇬🇧 amzn.to/3KyzGwV 💙 RTs & reviews are appreciated.
1
Mohammad-Ali A'RÂBI
@MohammadAliEN
22h
Scan your image with Trivy for high & critical CVEs and fail your pipeline on detection: trivy image --scanners vuln --severity CRITICAL,HIGH --exit-code 1 "$IMAGE". Don’t skip this before prod!
How to Secure Java Docker Images and Reduce CVE Risk - Container Security
From containersecurity.dev
Mohammad-Ali A'RÂBI
@MohammadAliEN
Oct 16
Inspect the permissions before running the Kit: sbx kit inspect docker.io/docker/sbx-kit… Check the declared network policy and credential sources alongside the software it adds. containersecurity.dev/blog/docker-sa…
Mohammad-Ali A'RÂBI
@MohammadAliEN
Oct 15
He's right, do npm install --ignore-scripts I even created a song for it. 😅
Kristiyan Velkov
@krisvelkov
Oct 15
🚨 npm can be a security nightmare! Did you know that running "npm install" can execute code on your machine? Malicious npm packages can abuse lifecycle scripts like "preinstall" and "postinstall" to steal credentials, access sensitive files, or compromise your dev environment.
1
Mohammad-Ali A'RÂBI
@MohammadAliEN
Oct 15
This has been my @BaselOne talk's feedback: More entertaining than informative. 🤡😅