Making the Most of Your Docker Hardened Images Enterprise Trial – Part 3

Docker Hardened Images (DHI) can be customized using two approaches: the Docker Hub UI for creating organization-wide "golden images" with automatic security patching, or multi-stage Dockerfile builds for application-specific customization. The Hub UI approach automatically rebuilds custom images when base images are patched, while multi-stage builds use a standard image to install dependencies then copy only necessary artifacts to the minimal DHI base. Both methods maintain security by keeping the final image minimal and non-root, though custom layers must be scanned separately for vulnerabilities. Organizations using multi-stage builds should sign their custom images to maintain the chain of trust established by DHI's SLSA provenance.