The recent Bitnami changes made one thing very clear: container image catalogs can become infrastructure dependencies.

Docker Hardened Images (DHI) are an interesting alternative. The community catalog is free, published under Apache 2.0, and provides minimal images, SBOMs, provenance, and a very small CVE surface.

There is a lot to like about DHI. But before you move everything over, ask yourself one question: what if DHI is the next Bitnami?