DockerSlim (docker-slim): Don't change anything in your Docker container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)

OCI hook to trace syscalls and generate a seccomp profile

Docker Secure Computing Profile Generator

Merged to firejail; Find syscalls of executables for seccomp-bpf sandbox policies.

Browser-in-a-website docker container with baked in extensions

Tool to capture containers syscalls and generate a Seccomp profile

Flask demo for presentation at Devops NG on Linux container hardening

Flask demo for presentation at Devops NG on Linux container hardening

Tool to enable bind mounting between two paths that are both inside the container.