Already using slim or distroless images?
Then this is where things get interesting: what still separates a smaller image from one you can verify, patch, and enforce in production.
@cat_edelveis shows what to look for and where hardened images fit into a real security pipeline.
