Distroless Image
A minimal container image holding only the application and its runtime files, with no shell.
See also Kubernetes Pod Security Admission, Kubernetes Pod Security Standards (PSS), Kubernetes SecurityContext, Linux Kali, Mutual TLS (mTLS), Open Policy Agent (OPA).