ops(docker): slashing container image sizes from 1.2GB to 45MB with multi-stage distroless builds 🐳
Compiling binaries and assets in heavy builder stages, then copying only the static artifacts into a minimal Chainguard or distroless runtime container completely wipes out OS-level CVE attack surfaces. What's your baseline container base image in 2026?
commit bcd7b59