"A malicious container running on a Docker-run host is deployed and ran"
A most relevant question being, how does this "malicious container" get onto the host in the first place?
A most relevant question being, how does this "malicious container" get onto the host in the first place?
If I had to work under such a restriction, I would ask for a cheap spare machine, running on a guest network and hosting no sensitive code, where I could download and try random packages off the internet before I could submit them for audit, approval and vendoring.