Docker launches Hardened Images to secure enterprise software supply chains

Software containerization company Docker Inc. today announced the launch of Docker Hardened Images, a new service that curates a catalog of security-hardened, enterprise-grade container images that meet the toughest software supply chain challenges.

Docker Hardened Images has been designed with security at its core, offering users images that are minimal, continuously maintained and tested to meet enterprise compliance standards. Available through Docker Hub, DHI allows developers, security engineers and platform teams to scale securely without disrupting familiar workflows.

According to Docker, DHI is a natural evolution of Docker’s platform, built directly into the workflows teams already trust. The service delivers a secure, flexible foundation that works out of the box and meets the needs of modern enterprise teams.

“The complexity of securing container dependencies shouldn’t fall squarely on developers’ shoulders,” explained Michael Donovan, vice president of product at Docker. “With Docker Hardened Images, we’re making it easier for teams to build with trusted and verified components that meet enterprise-grade security and compliance standards without adding friction to their workflow.”

DHI helps modern software teams meet their security and compliance goals without sacrificing speed. Docker argues that as development is moving rapidly, security guardrails must be built in rather than bolted on. DHI provides a trusted foundation for enterprise developers and the teams that support them.

For platform engineers, DHI offers a scalable solution to manage secure and compliant container images. Teams can define policies, control provenance and maintain consistency across environments, all from within their existing Docker workflows.

Application developers benefit by focusing on building and shipping code, not chasing vulnerabilities. With DHI, the company says, they can work faster without compromising on security with hardened, ready-to-use images readily available via Docker Hub.

For security engineers, the service offers access to verifiable, consistent artifacts that align with organizational standards. It also simplifies audits by providing the metadata and transparency needed to enforce policies and track compliance across containers.

The service additionally offers chief information security officers end-to-end visibility into container dependencies. The platform ensures that software components meet internal and external compliance standards straight out of the box, reducing risk without additional overhead.

Docker Hardened Images is designed to be secure by default while remaining lightweight and flexible. Each image is built to minimize vulnerabilities, meets Software Supply-chain Levels for Software Artifacts Build Level 3 requirement and runs as non-root by default to reduce production risk. Images are also minimized following distributionless principles, cryptographically signed for compliance and are available via popular distributions such as Alpine and Debian.

Image: SiliconANGLE/Reve