We’re coming up on a year since launching Docker Hardened Images (DHI) last May, and crossing a milestone earlier this month made me stop and reflect on what we’ve actually been building.
Earlier this month, we crossed over 500k daily pulls of DHIs, and over 25k continuously patched OS level artifacts in our SLSA Build Level 3 pipeline. From the time we launched the free DHI Community tier at the ...
This article presents Docker’s Hardened Images (DHI) as a paradigm shift in container security, emphasizing openness, multi-distro support, and verifiability. The strongest version of this narrative—its steelman—is compelling: Docker is addressing critical gaps in supply chain security by making hardened images free, avoiding proprietary lock-in, and providing extensive, machine-readable attestations. The piece effectively highlights industry shortcomings, such as incomplete SBOMs and delayed pa...