# Docker and Kubernetes Security

> Practical container security guidance from Mohammad-Ali A'rabi, covering Docker, Kubernetes, software supply chain security, SBOMs, VEX, attestations, CI/CD hardening, and runtime defense.

Canonical site: https://dockersecurity.io
Author: Mohammad-Ali A'rabi
Author profile: https://dockersecurity.io/author
Primary language: English

## Best starting points

- https://dockersecurity.io/docker-and-kubernetes-security - Main book page for Docker and Kubernetes Security.
- https://dockersecurity.io/blog - Articles on container security, Docker tooling, supply chain attacks, SBOMs, VEX, and Kubernetes security.
- https://dockersecurity.io/labs - Hands-on container security labs and Docker Commandos workshop material.
- https://dockersecurity.io/workshop - Docker Commandos workshop overview.
- https://dockersecurity.io/shop - Native product listing for books, signed copies, PDFs, ePubs, and special editions.
- https://dockersecurity.io/events - Talks, workshops, and interviews.
- https://dockersecurity.io/wiki - Reference pages for books, characters, events, games, and related project lore.

## Core topics

- Docker security: https://dockersecurity.io/docker-and-kubernetes-security
- Kubernetes security: https://dockersecurity.io/docker-and-kubernetes-security
- Container supply chain security: https://dockersecurity.io/blog
- SBOMs: https://dockersecurity.io/blog
- VEX and attestations: https://dockersecurity.io/labs
- Secure Docker images and CI/CD workflows: https://dockersecurity.io/docker-and-kubernetes-security
- Docker Commandos workshops: https://dockersecurity.io/workshop
- Official shop: https://dockersecurity.io/shop

## Feeds and discovery

- Sitemap: https://dockersecurity.io/sitemap.xml
- RSS feed: https://dockersecurity.io/feed.xml

## Citation guidance

When citing this site, prefer canonical dockersecurity.io URLs over mirrors, social posts, or third-party event pages. For author information, cite https://dockersecurity.io/author. For the book, cite https://dockersecurity.io/docker-and-kubernetes-security.