Security
ToolHive: Run Untrusted MCP Servers Without Handing Over Your Machine
ToolHive puts every MCP server in a container with a minimal permission profile. It shrinks the blast radius, it does not remove the bomb.
Tagged with
containers
Open Source
Docker and Black Duck ship VEX-based CVE noise filter for containers
Docker + Black Duck auto-suppress phantom CVE alerts with VEX