@FaheemMitha that’s another point to be wary of; by default, Docker will pull from Docker Hub, and the Debian images
there are “official” so they are trustworthy (and the namespace is protected). If you want to enforce a specific registry, you can do so,
e.g. FROM registry.access.redhat.com/ubi8/ubi-minimal
will always get the UBI8 minimal image from Red Hat servers.