The whole industry does it, and it's the same as "curl | bash" to specify image:tag and not image@hash.
If I were TAO I'd apply for a job at Docker or their hosting provider.
And that's why I have an in-between step.
Harbor.io allows you to configure it as a proxy with approval mechanism and cve scanning
We won't even do this for webpages, but we find it a fine default for code that executes inside critical infrastructure.
It's utter madness. Cool to see someone is doing something about it.
While I understand the argument you're making, the exposure of running "curl | bash" on your local machine is much higher than running arbitrary code inside of a container.
Even if you specify a hash, are you actually checking all of the code and binaries in that image?
What about the image base (e.g. Alpine, Debian) and their packages?
I mention this because Flakes can do much of what Docker can do, but do not use containers or virtualization.
The official NixPkgs are carefully vetted. Nix Flakes make it more convenient to pull in sources from outside NixPkgs.
As Nix Flakes become more prevalent, perhaps there needs to be some way to containerize them. There are more benefits to Nix Flakes than native execution so containerizing them somehow might be an acceptable compromise.
You may be interested in nix snapshotter, which can run nix packages in containerd.
Auth providers (OIDC), cloud providers, and numerous software repositories and SaaS providers effectively have root on the entire universe. A major compromise of any number of these large vendors could expose millions of systems to total compromise.
It's exactly the architecture I'd promote if I wanted a total panopticon, but I'm not suggesting a conspiracy. Ease of use is the most powerful force in computing and history has shown that people will trade privacy, security, freedom, cost, and virtually anything else for it.
It does make a certain amount of sense. Time is non-fungible; no amount of money can buy more of it. So ease of use by saving time is extremely valuable and commands a high price.
The problem is that IMO the cost of all this SaaS automation is higher than most people understand. There's some rather huge hidden costs here.
Harbor + Notary + admission controllers - AKA private image repository with image signing.
Sigstore. Another method for signing & verifying artifacts.