@@ -17,7 +17,7 @@ Images](../../docker-hub/image-library/trusted-content.md#verified-publisher-ima
1717follow similar best practices for minimalism and security but may not be as
1818stripped down to ensure compatibility with a wider range of use cases.
1919
20- ### What are minimal or distroless images?
20+ ## What are minimal or distroless images?
2121
2222Traditional container images include a full OS, often more than what is needed
2323to run an application. In contrast, minimal or distroless images include only:
@@ -36,7 +36,7 @@ They typically exclude:
3636Docker Hardened Images are based on this model, ensuring a smaller and more
3737secure runtime surface.
3838
39- ### What you gain
39+ ## What you gain
4040
4141| Benefit | Description |
4242| ------------------------| -------------------------------------------------------------------------------|
@@ -45,7 +45,7 @@ secure runtime surface.
4545| Improved security | Lack of shell and package manager limits what attackers can do if compromised |
4646| Better compliance | Easier to audit and verify, especially with SBOMs and attestations |
4747
48- ### Addressing common tradeoffs
48+ ## Addressing common tradeoffs
4949
5050Minimal and distroless images offer strong security benefits, but they can
5151change how you work with containers. Docker Hardened Images are designed to
@@ -60,7 +60,7 @@ maintain productivity while enhancing security.
6060By balancing minimalism with practical tooling, Docker Hardened Images support
6161modern development workflows without compromising on security or reliability.
6262
63- ### Best practices for using minimal images
63+ ## Best practices for using minimal images
6464
6565- Use multi-stage builds to separate build-time and runtime environments
6666- Validate image behavior using CI pipelines, not interactive inspection
0 commit comments