Docker-Official-Images

We outline how and why Debian operates as a secure basis for development and makes a good choice for Docker Official Images.

Docker Official Images are an important component of Docker's commitment to the security of both the software supply chain and open source software. We address three common misconceptions about Docker Official Images and outline seven ways they help secure the software supply chain.

Learn about the updated Docker Official Images (DOI) signing strategy and how OpenPubkey can be leveraged to smooth the flow and decrease the number of third-party entities the verifier is required to trust.