Af an attack can escape a container a lot of companies worldwide are going to need to patch a 0-day. I do not expect that to be part of my threat model for self-hosted services.

Feel free to send them directly to Russia instead

I’m sure they tried, but trump isn’t really informed on any subject

Looks like https://docs.numerique.gouv.fr/home/ except that one is backed by two governments.

Are you looking for https://docs.docker.com/build/metadata/attestations/?