Buildpacks Move the Container Hardening Control Point Away From the Dockerfile
Cloud Native Buildpacks, which graduated within the CNCF in July 2026, move base image choice out of per-service Dockerfiles into a single builder owned by platform engineering, enabling fleet-wide patching. BellSoft's hardened Paketo builder is the latest sign that vendors now treat the builder, not the Dockerfile, as the container security control point. By Mark Silvester
We haven't written up this one. InfoQ has the full story — the link below goes straight to it.
![[UPDATED] Police to file for inquest into Durian Tunggal shooting later this weeks](/img/446424)
