What is Docker Content Trust (DCT) and how does it protect against image tampering?

Question

Docker Fundamentals — Hard

What is Docker Content Trust (DCT) and how does it protect against image tampering?

Accepted Answer

Docker Content Trust (DCT) is a security feature that uses digital signatures to verify image integrity and publisher, preventing tampering. When enabled, Docker only pulls and runs signed images from trusted publishers, safeguarding against supply chain attacks.