#hardened-images
Tagged “hardened-images”
2 articlesSecurity & supply chain
Zero CVEs by default is a floor, not a moat
Docker is pitching its Hardened Images catalog as a way to make zero-CVE base images the default across your pipeline. That is a defensible floor. Treating a green scanner and a signed SBOM as the finish line is exactly how the last year of supply-chain incidents happened.
Aug 17, 2026 · Tomás VegaSupply-chain securityThe five-minute SBOM sniff test earns its keep
A quick, deliberate look at the bill of materials for a hardened image catches supply-chain trouble a CVE scanner will never flag. Bolt it into the pipeline, not the compliance report.
Jul 13, 2026 · Tomás Vega