Docker Announces Hardened Images to Boost Enterprise Software Supply Chain Security

New offering accelerates secure app delivery, giving platform and security teams enterprise-grade control without slowing developers down

Docker, Inc. has unveiled Docker Hardened Images (DHI), a curated catalog of security-hardened container images aimed at enhancing software supply chain security. These images are designed to address increasing security challenges and are readily available through Docker Hub.

According to Docker, the Hardened Images are built with security in mind, featuring minimal design, continuous maintenance, and compliance with Enterprise standards. This approach allows developers, security engineers, and platform teams to manage and scale securely without disrupting their workflows.

Michael Donovan, vice president of Product at Docker, stated, “The complexity of securing container dependencies shouldn’t fall squarely on developers’ shoulders. With Docker Hardened Images, we’re making it easier for teams to build with trusted and verified components that meet enterprise-grade security and compliance standards without adding friction to their workflow.”

The introduction of DHI follows a pattern of Docker's evolution in the development space, leveraging over a decade of experience and a significant user base on Docker Hub. Several partners, including Cloudsmith, GitLab, and Microsoft, are joining Docker to support the DHI ecosystem, providing secure images and integrating scanning and compliance insights into established workflows.

Steven Dickens, CEO and Principal Analyst at HyperFRAME Research, remarked, “Docker’s Hardened Images are a major step forward in software supply chain assurance. Developers and enterprises are looking for a trusted partner who understands both scale and simplicity. Docker brings years of ecosystem leadership to the hardened container space.”

Docker Hardened Images are said to cater to the needs of modern Enterprise developers, prioritizing security without requiring teams to compromise on speed. Features of the DHI include:

• Platform Engineers manage secure, compliant images with full policy control.
• Application Developers can utilize hardened images to ship code without focusing on vulnerability management.
• Security Engineers receive consistent artifacts aligned with security standards and ease of audits.
• CISOs gain visibility into supply chain compliance.

Docker Hardened Images focus on delivering maximum security and compliance while being lightweight and fast. The images are designed to eliminate vulnerabilities, run as non-root by default, and are compliant with various Enterprise environments.

As of now, Docker Hardened Images are available on Docker Hub.