&gt; Most containers are built on top of full OS images, with a full OS image&#x27;s worth of vulnerabilities<p>This is one of the problems DockerSlim (<a href="http:&#x2F;&#x2F;dockersl.im" rel="nofollow">http:&#x2F;&#x2F;dockersl.im</a>) is trying to address. You take those containers built on full OS images and you remove everything your app is not using reducing the attack surface.