Dockerfile security mistakes companies keep making

Root users, secrets baked into layers, unpinned base images, curl | sh. The common Dockerfile mistakes that weaken container security, and how to fix each one.