Docker-Kong

Docker-Kong refers to an integration between Docker and Aikido, a container security tool, aimed at enhancing vulnerability scanning in Docker images. Docker has verified certain CVEs as false positives or non-exploitable and suppresses them by default through Aikido. This integration improves container security by reducing noise in vulnerability alerts. The concept operates within the broader cloud-native ecosystem where container security is a critical concern. It is used by developers and DevOps teams managing containerized applications who need reliable, actionable security insights. Evidence shows the integration is being promoted via a webinar hosted by Aikido and Docker, indicating active development and community interest.

Created by: Docker and Aikido

Attention to Docker-Kong is rising due to a new Docker blog post highlighting enhanced vulnerability scanning via Aikido, which includes suppression of false positives. The post references a live webinar titled 'Less Noise, More Signal in Container Security,' indicating active promotion of the integration. This suggests a growing focus on improving security signal quality in container environments. The integration directly addresses a pain point in container security: false positives that clutter security dashboards. The trend is tied to Docker's push for hardened images and better security practices in cloud-native deployments. This is significant because secure container images are foundational to modern DevOps workflows.