Modernizing Production Containers to Resist the Constant CVE Flow

Tue, 14 Apr 2026 07:00:03 +0000

Common Vulnerabilities and Exposures or CVEs is a catalog of publicly disclosed software security flaws that attackers can use to gain unauthorized access.

With 40,003 CVEs recorded in 2024, denoting a 39% increase as compared to 2023, container vulnerabilities are no longer a minor cleanup task. It is a river that floods Kubernetes clusters, drowning the teams in operational burden while real exposures slip through.

Chasing every single CVE is a road to nowhere as new vulnerabilities are discovered constantly. The solution is to build a centralized vulnerability management system that will serve as a dam resisting the CVE flood and enable controlled CVE identification and remediation.

How to Containerize a Java Application Securely

Thu, 03 Jul 2025 07:00:01 +0000

TL;DR

Containerization or Dockerization is the process of packaging an application and its dependencies into a Docker image.
It’s beneficial to containerize your Java application as it provides a consistent environment for development, testing, and deployment.
Java is a compiled language, so your Docker image will only contain the compiled Java bytecode and the Java runtime environment.
Supply-chain security is the process of checking the dependencies in your application for vulnerabilities.
SBOM (Software Bill of Materials) is a list of all the dependencies in your application.
It’s a good practice to generate an SBOM when building your Docker image and push it to a registry for later reference.

Technical Requirements

In this article, we will use the following tools:

Sbom on JAVAPRO International

Modernizing Production Containers to Resist the Constant CVE Flow

How to Containerize a Java Application Securely

TL;DR

Technical Requirements