Weekend RoundUp: Docker Makes Hardened Images Free

Docker is making its secure container images freely available, with detailed SBOMs, CVE transparency, and a smaller attack surface.

AuthorAuthor

Gloria & Divine Odazie
December 19, 2025

In partnership with

The Tech newsletter for Engineers who want to stay ahead

Tech moves fast, but you're still playing catch-up?

That's exactly why 100K+ engineers working at Google, Meta, and Apple read The Code twice a week.

Here's what you get:

  • Curated tech news that shapes your career - Filtered from thousands of sources so you know what's coming 6 months early.

  • Practical resources you can use immediately - Real tutorials and tools that solve actual engineering problems.

  • Research papers and insights decoded - We break down complex tech so you understand what matters.

All delivered twice a week in just 2 short emails.

Hey there,

Happy Friday🥳!

Before you wrap the week, here’s a quick drop of things worth checking out.

đź“°Top Picks:

Linux Foundation Launches ORCA Alliance
The Linux Foundation has launched the Open Robust Compartmentalization Alliance to improve software security by containing faults and attacks. The group brings together industry, academia, and government to advance resilient system design. Read more.

Docker Makes Hardened Images Free
Docker has made its hardened container images free to use under an Apache 2.0 license, aiming to reduce supply chain risk with SBOMs and CVE transparency. Paid tiers remain for compliance, customization, and guaranteed patching. Read more.

SonarQube Adds Architecture Analysis in Beta
Sonar has introduced architecture analysis in SonarQube to help teams understand application structure and prevent costly design drift. The feature reverse engineers code to surface architectural gaps and reduce technical debt. Read more.

VS Code Update Brings Agents, TypeScript 7, and IntelliCode’s End
Microsoft’s latest VS Code update introduces agentic coding via Agent HQ, previews a faster TypeScript 7 compiler, and deprecates the free IntelliCode feature in favor of Copilot subscriptions. The changes bring real gains but also confusion and new security trade-offs. Read more.

GitHub to Charge for Self Hosted Actions Runners
GitHub will begin charging $0.002 per minute for self hosted Actions runners starting March 1, 2026, ending a long free tier. The move has sparked backlash from developers who run CI on their own infrastructure. Read more.

Cisco Warns of Actively Exploited Zero Day in Email Gateways
Cisco disclosed a maximum severity zero day in AsyncOS that allows remote command execution on certain email security appliances and is being exploited by a China linked APT group. Customers are urged to apply mitigations immediately. Read more.

Google to Retire Dark Web Report in February
Google will discontinue its dark web report tool on February 16, 2026, stopping new scans on January 15. The feature, launched in 2023 to alert users if their personal data appears on the dark web, will have all associated data deleted. Read more.

AWS DevOps Agent Preview
AWS is previewing DevOps Agent, an AI tool that helps teams investigate incidents, find root causes, and suggest reliability fixes. It integrates with logs, metrics, deployments, and ticketing to reduce manual work. Read more.

Google Cloud Offers Managed MCP Servers
Google Cloud now provides managed MCP servers, letting developers point AI agents to a unified endpoint across services like Maps, BigQuery, and GKE. Read more.

AI Code Adds More Issues
CodeRabbit finds AI-generated pull requests have 1.7Ă— more defects than human-written code, with bigger logic, security, and performance problems. Teams need to review carefully. Read more.

Bonus: Open Source Leads in 2025
The Linux Foundation’s 2025 Annual Report, showcases milestones across AI, cloud, security, and more. Highlights include growing contributor engagement, advances in security and governance, global collaborations, and new foundations shaping the future of open source. Download here.

Was this email forwarded to you? Subscribe here to get your weekly updates directly into your inbox.

Vibe Coding and The Technical Debt Time Bomb

🎧 Your Friday listen: Darin and Viktor explore the distinct level of software development, technical debt in the AI era and much more.

open.spotify.com/episode/0kUMA8gAXC5J7hCEs6Utt6?si=bfb2cf84ed134572

🗓️ Upcoming Events

Mark your calendars!

  • DevFest Kolkata 2025 (21 December): End the year with a one-day developer meetup in Kolkata, covering modern web, cloud, and mobile technologies, interactive coding sessions, and community networking. Get your tickets.

  • Conf42 DevOps 2026, (Online, 22 January, 2026): A virtual gathering for DevOps professionals to explore the latest trends, tools, and best practices in automation, CI/CD, and cloud-native development. Register here.

  • jChampions, Conference 2026, (Online, 22–27 January): A week-long online conference focused on Java, programming innovations, and community-led projects, offering interactive sessions and hands-on workshops. Register here.

  • Identity Shield Summit '26, (January 16–17, 2026, MDS Banquets, Pune, IN): A cybersecurity summit dedicated to identity protection, authentication, and access management, featuring industry experts and strategic insights for enterprise security teams. Register here.

Opportunities:

Got a sec?
Just two questions. Honest feedback helps us improve. No names, no pressure.

Click here.

And it’s a wrap!

If you found this helpful, share this link with a colleague or fellow DevOps engineer.

Have a restful weekend!

Divine Odazie
Founder of EverythingDevOps