Raja Nagori

A hands-on lab to build a GitHub-worthy security tooling image the same pattern behind Nightingale: Docker for Pentesters (Black Hat Arsenal / OWASP Global AppSec).

We’ll do live:

- Choose a focused toolset (don’t boil the ocean)

- Write a clean multi-stage / minimal Dockerfile

- Harden basics (non-root, pin versions, drop junk, secrets hygiene)

- Add Trivy (or equivalent) so you can show scan results

- Shape a README that looks like a real project, not a tutorial dump

You’ll leave with:

- A working Dockerfile + scan command

- A README outline ready to publish

- Next steps: GHCR publish, Actions, SBOM (optional stretch)

Bring:

- A laptop with Docker installed

- GitHub account

- Optional: 2–3 tools you want in the image

Best follow-on to “Your First Security Project” if you want something concrete to ship this week.