[geezerjay]

Gitlab provides public and private projects with their own registry which can host Docker images built by Gitlab's CICD service.

[ralala]

And you can even run your own gitlab instance and don't expose it to the internet.

Nevertheless: The base images will be pulled from dockerhub by default and I am not sure we should trust them. Do we have any better alternatives for this?