Good news. Docker has released Docker Hardened Images (DHI) as free, open source base images. These Alpine and Debian Linux based images offer SLSA Level 3 provenance and full transparency, making secure-by-default containers accessible to all developers and IT professionals. This move eliminates the need to build custom hardened images, with paid tiers reserved for specialized compliance like FIPS or STIG. https://www.docker.com/blog/docker-hardened-images-for-every-developer/
Discussion
Loading...
> If it sounds too good to be true, here鈥檚 the bottom line up front: every developer and every application can (and should!) use DHI without restrictions.*
*: for now, until you get locked in properly