13 hands-on Docker security labs, from CIS checks to AI context poisoning
A free repo of reproducible Docker security labs that move from docker-bench CIS auditing and least-privilege hardening through secrets, Cosign image signing, and Kyverno policy gates to AI context-poisoning defenses. Each lab ships scripts, configs, and captured experiment evidence rather than theory, and maps to production cloud/K8s ops. Solid for engineers, auditors, and platform teams wanting something to actually run.