mirror of
https://github.com/docker/docs.git
synced 2026-03-27 06:18:55 +07:00
dhi: link to sla (#24541)
<!--Delete sections as needed --> ## Description Added link to SLA when mentioned. Added SLA link to additional resources ## Related issues or tickets https://docker.slack.com/archives/C04M34MRQS1/p1774544986110649?thread_ts=1774541706.079779&cid=C04M34MRQS1 ## Reviews <!-- Notes for reviewers here --> <!-- List applicable reviews (optionally @tag reviewers) --> - [ ] Editorial review --------- Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
This commit is contained in:
@@ -41,7 +41,7 @@ CVE mitigation:
|
||||
95% smaller than traditional images, limits the number of potential
|
||||
vulnerabilities, making it harder for attackers to exploit unneeded software.
|
||||
|
||||
- Faster CVE remediation: Maintained by Docker with an enterprise-grade SLA,
|
||||
- Faster CVE remediation: Maintained by Docker with an [enterprise-grade SLA](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf),
|
||||
DHIs are continuously updated to address known vulnerabilities. Critical and
|
||||
high-severity CVEs are patched quickly, ensuring that your containers remain
|
||||
secure without manual intervention.
|
||||
|
||||
@@ -47,6 +47,6 @@ following features:
|
||||
assess and mitigate risks effectively.
|
||||
|
||||
- Continuous maintenance and rapid CVE remediation: Docker maintains DHIs with
|
||||
regular updates and security patches, backed by an SLA for addressing critical
|
||||
and high-severity vulnerabilities. This proactive approach helps ensure that
|
||||
images remain secure and compliant with enterprise standards.
|
||||
regular updates and security patches, backed by an [SLA for addressing critical
|
||||
and high-severity vulnerabilities](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf). This proactive approach helps ensure that
|
||||
images remain secure and compliant with enterprise standards.
|
||||
|
||||
@@ -14,7 +14,7 @@ This page explains the build process for both base DHI images and customized
|
||||
images available with DHI Select and DHI Enterprise subscriptions.
|
||||
|
||||
With DHI Select or DHI Enterprise subscriptions, the automated security update pipeline for
|
||||
both base and customized images is backed by SLA commitments, including a 7-day
|
||||
both base and customized images is backed by [SLA commitments](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf), including a 7-day
|
||||
SLA for critical and high severity vulnerabilities. DHI Community offers a secure baseline
|
||||
but no guaranteed remediation timelines.
|
||||
|
||||
@@ -131,8 +131,8 @@ Docker responds quickly to critical vulnerabilities. By building essential
|
||||
components from source rather than waiting for packaged updates, Docker can
|
||||
patch critical and high severity CVEs within days of upstream fixes and publish
|
||||
updated images with new attestations. For DHI Enterprise subscriptions, this
|
||||
rapid response is backed by a 7-day SLA for critical and high severity
|
||||
vulnerabilities.
|
||||
rapid response is backed by a [7-day SLA for critical and high severity
|
||||
vulnerabilities](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf).
|
||||
|
||||
The following diagram shows the base image build flow:
|
||||
|
||||
|
||||
@@ -39,7 +39,7 @@ securely.
|
||||
including fixing vulnerabilities in libraries and dependencies.
|
||||
- Docker: Rebuilds and re-releases images with upstream patches applied. Docker
|
||||
monitors for vulnerabilities and publishes updates to affected images. DHI Select
|
||||
and DHI Enterprise include SLA commitments. DHI Community offers a secure baseline but no
|
||||
and DHI Enterprise include [SLA commitments](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf). DHI Community offers a secure baseline but no
|
||||
guaranteed remediation timelines.
|
||||
- You: Apply DHI updates in your environments and patch any software or
|
||||
dependencies you install on top of the base image.
|
||||
|
||||
@@ -91,7 +91,7 @@ maintained so you don't have to. They offer:
|
||||
|
||||
|
||||
- Images built for peace of mind: Ultra-minimal and distroless, DHIs eliminate up to 95% of the traditional container attack surface.
|
||||
- No more patch panic: With continuous CVE scanning and SLA-backed remediation, Docker helps you stay ahead of threats.
|
||||
- No more patch panic: With continuous CVE scanning and [SLA-backed remediation](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf), Docker helps you stay ahead of threats.
|
||||
- Audit-ready images: All DHIs include signed SBOMs, VEX, and provenance that support security and compliance workflows.
|
||||
- Images that work with your stack: Available in Alpine and Debian flavors, DHIs drop into your existing Dockerfiles and pipelines.
|
||||
- Images backed by enterprise support: Get peace of mind with Docker's support and rapid response to critical vulnerabilities.
|
||||
|
||||
@@ -122,6 +122,8 @@ comparison](https://www.docker.com/products/hardened-images/#compare).
|
||||
- Continuous patching: Regular security updates backed by SLA commitments
|
||||
- Enterprise support: Access to Docker's support team for mission-critical applications
|
||||
|
||||
For complete details, see the [Support Service Level Agreement](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf).
|
||||
|
||||
### Compliance variants {tier="DHI Select & DHI Enterprise"}
|
||||
|
||||
- FIPS-enabled images: For regulated industries and government systems
|
||||
|
||||
@@ -16,7 +16,7 @@ mirroring. With a DHI Select or Enterprise subscription, you must mirror to get:
|
||||
- Extended Lifecycle Support (ELS) variants (requires add-on)
|
||||
- Image or Helm chart customization
|
||||
- Air-gapped or restricted network environments
|
||||
- SLA-backed security updates
|
||||
- [SLA-backed security updates](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf)
|
||||
|
||||
## How to mirror
|
||||
|
||||
|
||||
@@ -70,6 +70,8 @@ organization:
|
||||
- [Start a free trial](https://hub.docker.com/hardened-images/start-free-trial):
|
||||
Explore DHI Select and Enterprise features including FIPS/STIG variants, customization,
|
||||
and SLA-backed support
|
||||
- [Support Service Level Agreement](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf):
|
||||
Review the SLA commitments for DHI Select and Enterprise subscriptions
|
||||
- [Request a demo](https://www.docker.com/products/hardened-images/#getstarted): Get a
|
||||
personalized demo and information about DHI Select and Enterprise subscriptions
|
||||
- [Request an image](https://github.com/docker-hardened-images/catalog/issues):
|
||||
|
||||
Reference in New Issue
Block a user