Skip to content

Commit 9adf210

Browse files
dhi: minor wording and cross-linking updates (#23207)
<!--Delete sections as needed --> ## Description Updated DHI topics based on SEO feedback. - Link to Docker Scout from /core-concepts/sbom/ and /how-to/verify/ - Link to Docker Official Images and Verified Publisher Images from /core-concepts/distroless/ and /core-concepts/hardening/ - Add optimizations to /core-concepts/digests/ for "image digest" ## Related issues or tickets ENGDOCS-2815 ## Reviews <!-- Notes for reviewers here --> <!-- List applicable reviews (optionally @tag reviewers) --> - [ ] Editorial review Signed-off-by: Craig <[email protected]>
1 parent 59b192f commit 9adf210

File tree

5 files changed

+22
-9
lines changed

5 files changed

+22
-9
lines changed

content/manuals/dhi/core-concepts/digests.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Digests
2+
title: Image digests
33
description: Learn how Docker Hardened Images help secure every stage of your software supply chain with signed metadata, provenance, and minimal attack surface.
44
keywords: docker image digest, pull image by digest, immutable container image, secure container reference, multi-platform manifest
55
---
@@ -21,9 +21,9 @@ sha256:94a00394bc5a8ef503fb59db0a7d0ae9e1110866e8aee8ba40cd864cea69ea1a
2121
This digest uniquely identifies the specific version of the `nginx:latest` image,
2222
ensuring that any changes to the image content result in a different digest.
2323

24-
## Why are digests important?
24+
## Why are image digests important?
2525

26-
Using digests instead of tags offers several advantages:
26+
Using image digests instead of tags offers several advantages:
2727

2828
- Immutability: Once an image is built and its digest is generated, the content
2929
tied to that digest cannot change. This means that if you pull an image using
@@ -40,15 +40,15 @@ Using digests instead of tags offers several advantages:
4040

4141
## Docker Hardened Image digests
4242

43-
By using digests to reference DHIs, you can ensure that your applications are
43+
By using image digests to reference DHIs, you can ensure that your applications are
4444
always using the exact same secure image version, enhancing security and
4545
compliance
4646

4747
## View an image digest
4848

4949
### Use the Docker CLI
5050

51-
To view the digest of a Docker image, you can use the following command. Replace
51+
To view the image digest of a Docker image, you can use the following command. Replace
5252
`<image-name>:<tag>` with the image name and tag.
5353

5454
```console

content/manuals/dhi/core-concepts/distroless.md

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,12 @@ Minimal images, sometimes called distroless images, are container images
1010
stripped of unnecessary components such as package managers, shells, or even the
1111
underlying operating system distribution. Docker Hardened Images (DHI) embrace
1212
this minimal approach to reduce vulnerabilities and enforce secure software
13-
delivery.
13+
delivery. [Docker Official
14+
Images](../../docker-hub/image-library/trusted-content.md#docker-official-images)
15+
and [Docker Verified Publisher
16+
Images](../../docker-hub/image-library/trusted-content.md#verified-publisher-images)
17+
follow similar best practices for minimalism and security but may not be as
18+
stripped down to ensure compatibility with a wider range of use cases.
1419

1520
### What are minimal or distroless images?
1621

content/manuals/dhi/core-concepts/hardening.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,13 @@ surface, making it more difficult for an attacker to gain control or escalate
1515
privileges inside the container.
1616

1717
Hardening also involves applying best practices like running as a non-root user,
18-
reducing writable surfaces, and ensuring consistency through immutability.
18+
reducing writable surfaces, and ensuring consistency through immutability. While
19+
[Docker Official
20+
Images](../../docker-hub/image-library/trusted-content.md#docker-official-images)
21+
and [Docker Verified Publisher
22+
Images](../../docker-hub/image-library/trusted-content.md#verified-publisher-images)
23+
follow best practices for security, they may not be as hardened as Docker
24+
Hardened Images, as they are designed to support a broader range of use cases.
1925

2026
## Why is it important?
2127

content/manuals/dhi/core-concepts/sbom.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -89,4 +89,6 @@ $ docker scout attest get docs/dhi-node:20.19-debian12-fips-20250701182639 \
8989
## Resources
9090

9191
For more details about SBOM attestations and Docker Build, see [SBOM
92-
attestations](/build/metadata/attestations/sbom/).
92+
attestations](/build/metadata/attestations/sbom/).
93+
94+
To learn more about Docker Scout and working with SBOMs, see [Docker Scout SBOMs](../../scout/how-tos/view-create-sboms.md).

content/manuals/dhi/how-to/verify.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ Docker's public key for DHI images is published at:
2020

2121
## Verify attestations with Docker Scout
2222

23-
You can use the Docker Scout CLI to list and retrieve attestations for Docker
23+
You can use the [Docker Scout](/scout/) CLI to list and retrieve attestations for Docker
2424
Hardened Images, including images mirrored into your organization's namespace.
2525

2626
> [!NOTE]

0 commit comments

Comments
 (0)