The Docker company has announced the provision of free access to a collection of secure container images called DHI (Docker Hardened Images), which includes over a thousand minimalist builds based on Alpine and Debian with preconfigured environments for running various applications, toolsets, runtimes, and platforms. The images are distributed under the Apache 2.0 license and are supported by Docker's team.
Using DHI images simplifies the task of maintaining the security of infrastructure, as Docker employees are responsible for fixing vulnerabilities in the base content of the images and promptly preparing updates, leaving users to focus only on the security of their applications and additionally installed dependencies. To protect against attacks through dependency compromise (Supply Chain) in the provided images, the content is built from source code using controlled namespaces, undergoing reviews, and implementing a "cooling-off period" before delivering new versions.
Source: opennet.ru
