Docker supply chain hardening — from Scout D to OpenSSF 7.8 on a 730K-pull image
2026-04-22
DevOps & Cloud How I hardened a 730K-pull public Docker image from Scout grade D to OpenSSF Scorecard 7.8. Multi-stage build, cosign signing, SLSA provenance, non-root default, and the incident that changed how I ship attestations.
2587 words 13 min read