Red Hat Hardened Images now supported in AWS scanning services

Red Hat and AWS have expanded their collaboration to support Red Hat Hardened Images within the AWS Inspector Scan API and ECR Basic scanning. These hardened images are designed to reduce the attack surface by containing only the essential files required for an application to run, removing unnecessary tools and packages that often lead to excessive vulnerability alerts.

Effective software supply chain security for Linux systems requires monitoring the entire lifecycle of code, from upstream sources through build runners and deployment pipelines to the production host. Maintaining trust involves verifying the origin, dependencies, and transformation processes of software artifacts to ensure that the code running in production matches the reviewed version.