1. A computer-implemented method comprising: retrieving an image of a software container from an image registry; scanning the image to identify a rule that is specific to the image; creating a computer security policy for the image, the computer security policy including the rule, the computer security policy dictating permissible operations of an application program that is containerized in the image; retrieving the image into a container host machine that is configured to host the application program that is containerized in the image; retrieving the computer security policy into the container host machine; identifying the computer security policy as specific to the image; and enforcing the computer security policy in the container host machine.