Hardened, continuously maintained, near 0 CVE container images