Docker Open Sources Production-Ready Hardened Images for Free

Docker has made its Docker Hardened Images (DHI) freely available under an Apache 2.0 license to help mitigate software supply chain attacks; the offering includes SBOMs, SLSA Build Level 3 provenance, transparent CVE reporting, and significantly smaller images, while Docker retains a paid DHI Enterprise tier for organizations requiring SLAs and additional compliance (FIPS, FedRAMP, STIG) and faster patching.