We’re coming up on a year since launching Docker Hardened Images (DHI) this May, and crossing a milestone earlier this month made me stop and reflect on what we’ve actually been building.
Earlier this month, we crossed over 500k daily pulls of DHIs, and over 25k continuously patched OS level artifacts in our SLSA Level 3 pipeline. From the time we launched the free DHI Community tier at the end of...
**Steelman:** Docker’s narrative presents a compelling case for its Hardened Images initiative as a paradigm shift in supply chain security. By prioritizing accessibility (free tier, open-source), compatibility (multi-distro support), and transparency (17 signed attestations per image), Docker positions itself as a pragmatic alternative to proprietary solutions that impose migration costs and vendor lock-in. The emphasis on building from source for established distributions like Debian and Alpin...