The Saddest Moment (2013) [pdf]
Summary
The article describes a GitHub project focused on Minimal CVE Hardened container images rebuilt daily using Chainguard's apko and Wolfi to minimize CVEs. It highlights security features such as non-root users, shell-less images, SBOMs, and cryptographic signing, and provides build, verification, and usage guidance intended to reduce attack surfaces for containerized applications.