diff --git a/.github/workflows/docker-forensics-bash-workflow.yml b/.github/workflows/docker-forensics-bash-workflow.yml
index 4c56f0c..da9016a 100644
--- a/.github/workflows/docker-forensics-bash-workflow.yml
+++ b/.github/workflows/docker-forensics-bash-workflow.yml
@@ -22,12 +22,38 @@ jobs:
         cat /etc/issue
         cat /etc/os-release
         sudo apt-get install -y neofetch && neofetch  
+        sudo apt-get install -y neofetch && neofetch  
+    - name: "docker image history"
+      run: |
+        #run on the background
+        docker run -d --name test  alpine:latest ls
+        docker container ls
+        docker ps -a
+        docker history alpine:latest
+    - name: "docker events"
+      run: |
+        #run on the background
+        docker events --filter 'image=alpine' > alpine_events.txt &
+        docker run -d --name test1  alpine:latest ls
+        docker image ls
+        docker container ls
+        docker ps -a
+        docker container stop test1
+        cat alpine_events.txt 
+        sudo docker container start test1
+        cat alpine_events.txt 
     - name: "apache2 image"
       run: |
         #run on the background
-        docker run -d --name apache2-container -e TZ=UTC -p 8080:80 ubuntu/apache2:2.4-21.10_beta &
+        docker run -d --name apache2-container -e TZ=UTC -p 8080:80 ubuntu/apache2:2.4-21.10_beta
         docker image ls
-        docker container ls  
+        docker container ls 
+        # docker history ubuntu/apache2:2.4-21.10_beta
+        # docker events --filter 'image=ubuntu/apache2:2.4-21.10_beta'
+        # docker events --since '2021-01-12'
+        # # docker top apache2-container # processes of container
+        # docker port apache2-container # show all mapped ports of container 
+        # docker logs apache2-container
         # apt list --installed | grep netstat
         # sudo netstat -plan | grep ":8080"
         # netstat -plan
diff --git a/.github/workflows/dockerslim-wf.yml b/.github/workflows/dockerslim-wf.yml
new file mode 100644
index 0000000..2f96c07
--- /dev/null
+++ b/.github/workflows/dockerslim-wf.yml
@@ -0,0 +1,62 @@
+name: "dockerslim   CI workflow"
+
+
+on:
+  push:
+    branches: [ test ]
+
+
+jobs:
+
+
+  ubuntu-latest-dockerslim-job:
+    name: "dockerslim ubuntu latest"
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2
+    - name: "os fingerprinting"
+      run: |
+        hostnamectl status
+        lsb_release -a
+        lsb_release -d
+        cat /etc/lsb-release
+        cat /etc/issue
+        cat /etc/os-release
+        sudo apt-get install -y neofetch && neofetch   
+    - name: "dockerslim"
+      run: |
+        #https://github.com/docker-slim/docker-slim
+        curl -L -o ds.tar.gz https://downloads.dockerslim.com/releases/1.37.3/dist_linux.tar.gz
+        tar -xvf ds.tar.gz
+        mv  dist_linux/docker-slim /usr/local/bin/
+        mv  dist_linux/docker-slim-sensor /usr/local/bin/   
+    - name: "dockerslim Scripted Install"
+      run: |
+        #https://github.com/docker-slim/docker-slim
+        curl -sL https://raw.githubusercontent.com/docker-slim/docker-slim/master/scripts/install-dockerslim.sh | sudo -E bash -          
+    - name: "dockerslim docker"
+      run: |
+        #https://github.com/docker-slim/docker-slim
+        docker pull dslim/docker-slim
+
+
+  macos-latest-dockerslim-job:
+    name: "dockerslim macos latest"
+    runs-on: macos-latest
+    steps:
+    - uses: actions/checkout@v2
+    - name: "dockerslim"
+      run: |
+        #https://github.com/docker-slim/docker-slim
+        curl -L -o ds.zip https://downloads.dockerslim.com/releases/1.37.3/dist_mac.zip
+        unzip ds.zip
+        mv  dist_mac/docker-slim /usr/local/bin/
+        mv  dist_mac/docker-slim-sensor /usr/local/bin/    
+    - name: "dockerslim Scripted Install"
+      run: |
+        #https://github.com/docker-slim/docker-slim
+        curl -sL https://raw.githubusercontent.com/docker-slim/docker-slim/master/scripts/install-dockerslim.sh | sudo -E bash -             
+    - name: "dockerslim brew"
+      run: |
+        #https://github.com/docker-slim/docker-slim
+        brew install docker-slim
\ No newline at end of file