docker-hardened-base — CVE-lean distroless base images with a hardening linter

Tiny, CVE-lean base images your services can actually trust — with a linter that fails the build if the hardening slips.