"Free service which requires $$ to maintain" and "low risk" are not compatible. We moved to cloud as well, and we use AWS ECR for caching. We have a script for

"Free service which requires $$ to maintain" and "low risk" are not compatible. We moved to cloud as well, and we use AWS ECR for caching. We have a script for "docker login to ECR" and a list of images to auto-mirror periodically. There is a bit of friction when adding new, never-seen-before image, but in general this does not slow developers much. And we never hit any rate-limits, too! We pay for those ECR accesses, so I am pretty confident they are not going to go away. Unlike free docker images.