`; resultsHTML += results .map((item) => { return `
${item.meta.title}

…${item.excerpt}…

`; }) .join(""); if (resultsLength > 5) { resultsHTML += `
Show all results
`; } searchBarResults.innerHTML = resultsHTML; } } searchBarInput.addEventListener("input", search); if (window.heap !== undefined) { searchBarResults.addEventListener('click', function (event) { if (event.target.tagName === 'A' && event.target.closest('.link')) { const searchQuery = event.target.getAttribute('data-query'); const resultIndex = event.target.getAttribute('data-index'); const url = new URL(event.target.href); const properties = { docs_search_target_path: url.pathname, docs_search_target_title: event.target.textContent, docs_search_query_text: searchQuery, docs_search_target_index: resultIndex, docs_search_source_path: window.location.pathname, docs_search_source_title: document.title, }; heap.track("Docs - Search - Click - Result Link", properties); } }); } });

How-tos

Table of contents

This section provides practical, step-by-step guidance for working with Docker Hardened Images (DHIs). Whether you're evaluating DHIs for the first time or integrating them into a production CI/CD pipeline, these topics walk you through each phase of the adoption journey, from discovery to debugging.

To help you get started and stay secure, the topics are organized around the typical lifecycle of working with DHIs.

Lifecycle flow

  1. Explore available images and metadata in the DHI catalog.
  2. Mirror trusted images into your namespace or registry.
  3. Adopt DHIs in your workflows by pulling, using in development and CI, and migrating existing applications to use secure, minimal base images.
  4. Analyze images by verifying signatures, SBOMs, and provenance, and scanning for vulnerabilities.
  5. Enforce policies to maintain security and compliance.
  6. Debug containers based on DHIs without modifying the image.

Each of the following topics aligns with a step in this lifecycle, so you can progress confidently through exploration, implementation, and ongoing maintenance.

Step-by-step topics

Explore Docker Hardened Images

Learn how to find and evaluate image repositories, variants, metadata, and attestations in the DHI catalog on Docker Hub.

Mirror a Docker Hardened Image repository

Learn how to mirror an image into your organization's namespace and optionally push it to another private registry.

Use a Docker Hardened Image

Learn how to pull, run, and reference Docker Hardened Images in Dockerfiles, CI pipelines, and standard development workflows.

Migrate an existing application to use Docker Hardened Images

Follow a step-by-step guide to update your Dockerfiles and adopt Docker Hardened Images for secure, minimal, and production-ready builds.

Verify a Docker Hardened Image

Use Docker Scout or cosign to verify signed attestations like SBOMs, provenance, and vulnerability data for Docker Hardened Images.

Scan a Docker Hardened Image

Learn how to scan Docker Hardened Images for known vulnerabilities using Docker Scout, Grype, or Trivy.

Enforce Docker Hardened Image usage with policies

Learn how to use image policies with Docker Scout for Docker Hardened Images.

Debug a Docker Hardened Image

Use Docker Debug to inspect a running container based on a hardened image without modifying it.