It's made worse by the fact that only a few major images are used as bases. That's normally good for security, as they are highly vetted and quickly updated, bu

It's made worse by the fact that only a few major images are used as bases. That's normally good for security, as they are highly vetted and quickly updated, but if they could be compromised, say Alpine or Ubuntu Clould, even for a minute, countless images would be built using the compromised base and it would be very hard to ensure they were all rebuilt. As I understand it, there's no element of signing from the actual devs of an image, just from the central trust service of Docker Hub.