logoalt Hacker News

hobofantoday at 12:37 PM2 repliesview on HN

Asking the very obvious question (as it's not apparent from the website): Why would I use this over DHI (Docker Hardened Images) or Chainguard Images, both of which also have a set of free hardened images?


Replies

morellonettoday at 12:44 PM

1. These are all >1200 of our images, including FIPS, and all versions… others gate many of their images

2. These are all built continuously from upstream source on a distroless base… this makes a significant difference in attack surface and CVE count re DHI images and you can easily check our word with a few scans

3. These are truly free… no auth wall, no signup, no trial, no limit on numbers of images or pulls or anything like that

4. We have really invested in making these agent ready… we have a CLI (minicli) designed for both humans and agents to easily discover, understand, migrate to, and build on them… for example, check out the AI migration prompts we provide for each image, we’ve refined these across many customer deployments such that you can copy paste into your agent of choice, point it at a Dockerfile and have it do all / nearly all the work to move to these images

show 3 replies
phishintoday at 12:43 PM

Agreed. Also on front page the nginx container is 6 days old, so no daily builds

show 1 reply