[cloudking]

I'm fairly new to Docker. Do folks really rely on public images and registries for production systems? Seems like a brittle strategy.

[edoceo]

Yes, 1000s of orgs. Larger players might use a pull-through-cache - but it's not as common as it should be. Similar issue for other software-supply-chain (NPM, pyPi, etc)