# 05 - Container Security - Image Scanning e Runtime Protection

Container image vulnerabilities, scanning (Trivy, Clair), image signing, registry security, runtime monitoring (Falco), network policies, secrets in containers.

## What you'll learn

- How container image scanning works with Trivy and Grype
- Building secure images with multi-stage builds and distroless
- Image signing and verification with Cosign
- Runtime protection with Falco and network policies
- Security context and Pod Security Standards in Kubernetes

*This article is part of the **DevSecOps** series on federicocalo.dev.*

---

## Read the full article

The complete article (14 min read) with code examples, diagrams, and practical exercises is available here:

**➡️ [05 - Container Security - Image Scanning e Runtime Protection](https://federicocalo.dev/en/blog/container-security-scanning-runtime)**

`https://federicocalo.dev/en/blog/container-security-scanning-runtime`

---

*By [Federico Calò](https://federicocalo.dev) — Software Developer & Technical Writer*