This was really helpful for me:

https://cheatsheetseries.owasp.org/cheatsheets/Docker_Securi...