Docker is announcing Hardened System Packages, extending its Docker Hardened Images (DHI) security guarantees beyond base images to over 8,000 Alpine packages (with Debian coming soon). Each package is source-built by Docker, cryptographically attested, and backed by SLSA Build Level 3 verification. This allows teams to customize DHI base images with additional packages while maintaining near-zero CVE guarantees and a complete provenance chain. Docker is also introducing a new pricing tier called DHI Select at $5,000 per repo for SLA-backed CVE remediation, alongside the existing free DHI Community tier and DHI Enterprise. The DHI catalog has grown to over 2,000 hardened container images, with notable adopters including Adobe, n8n.io, and Medplum.
