Why We Chose the Harder Path: Hardened Images, One Year Later

Docker Hardened Images surpassed 500k daily pulls and now hosts 2,000+ hardened images, all built in a SLSA Build Level 3 pipeline.
It compiles tens of thousands of Debian and Alpine packages from source. It runs 1M+ builds. It ships 17 signed attestations per image. It auto-rebuilds customized images under SLA.