6 min read
|
Saved February 14, 2026
|
Copied!
Do you care about this?
Docker has released Docker Hardened Images (DHI), a set of secure, minimal images for developers. These images are open source and aim to enhance software supply chain security, making it easier for all developers to build applications securely.
If you do, here's more
Docker has introduced Docker Hardened Images (DHI), a set of secure, minimal, and production-ready images aimed at improving software supply chain security. Launched in May 2025, DHI has already hardened over 1,000 images and is now freely available under an Apache 2.0 license. This move responds to the alarming rise in supply-chain attacks, which caused over $60 billion in damage in 2025 alone. With nearly 90% of organizations using containers in their workflows, ensuring security has become a pressing necessity.
DHI supports both developers and enterprises by providing an open-source foundation that is compatible with popular systems like Alpine and Debian. Users can rely on DHI for continuous security patching, often within seven days, and for compliance with regulations such as FIPS and FedRAMP. Docker emphasizes transparency, sharing complete Software Bill of Materials (SBOM) for every image and public vulnerability data without hiding issues. This approach allows developers to understand their security posture clearly.
The initiative has gained traction among major enterprises like Adobe and Qualcomm, which use Docker to secure their operations. Startups are also benefiting by leveraging DHI to meet compliance requirements quickly. Docker plans to extend DHI's capabilities further by introducing hardened libraries and system packages in the future. The goal is to provide a secure application foundation from the ground up.
Questions about this article
No questions yet.