Getting started
Migration Assistant
Paste a Dockerfile, get a hardened PodArmor rewrite.
Portal → Migrate maps an existing Dockerfile to its hardened PodArmor equivalents.
How to use it
Paste a Dockerfile and click Analyse & harden. For each FROM, PodArmor:
- Matches the base image to a hardened equivalent in your catalog by language + major version
- Shows the equivalent's real security posture — severity counts, fixable count, size, hardening labels
- Rewrites the confident matches into a ready-to-copy hardened Dockerfile
node:20-alpine → podarmor/node:20-r9 [confident]
nginx:1.28-alpine → podarmor/nginx:1.28.0-r6 [confident]
python:3.11-slim → podarmor/python:3.11.15-r6 [confident]
golang:1.24 → (no equivalent yet)Bases without a hardened equivalent are reported honestly as "no equivalent" — click through to request one from the catalog.
To see your current exposure for a base, each row includes a
grype <image> command. PodArmor won't fabricate an upstream delta — it shows the hardened image's real numbers and lets you compare against your own.