Setting Docker Hardened Images free (Changelog Interviews #675)

Docker's initiative to provide free hardened container images is explored, addressing the increasing threat of supply chain attacks. Tushar Jain, EVP of Engineering at Docker, explains the move from a paid product to a largely free offering, emphasizing the ethos of broad community access and secure starting points for developers. Docker Hardened Images include SBOMs, SLSA build pipeline, and cryptographic signing, while enterprise features like SLAs and FIPS images remain paid. The discussion covers the tension between usability and security, the importance of transparency through VEX statements, and the long-term vision of securing the entire software supply chain. Future plans involve hardened system and language packages, secure build pipelines, and AI-driven agents to aid migration and security management.