Wiz Introduces Hardened WizOS Container Base Images for Private Preview
Summary
Wiz says its internally adopted WizOS Linux base images use reproducible builds, source-built and signed components, and testing to reduce inherited container vulnerabilities. The images are now in private preview for Wiz customers.
Key points
- Wiz describes WizOS as a minimal, hardened Linux distribution compatible with Alpine, using glibc instead of Alpine’s musl.
- The company says WizOS components are built from source in a reproducible pipeline, with signing and provenance.
- Wiz says new image versions receive functional and end-to-end testing before release.
- Wiz reports that adopting the images reduced critical and high base-image CVEs to near zero and led to fewer blocked builds and smaller images.
- Wiz says migration was simpler for Alpine-based services and required deeper changes for some Ubuntu- and Debian-based services.
- WizOS is available in private preview for Wiz customers; the company says it plans to expand support for more base and application-layer images.
Article Details
- Event Type
- Wiz introduced WizOS, a hardened, minimal container base-image distribution, and adopted it across its development teams.
- Impact
- Wiz reports that critical and high CVEs in its base images dropped to near zero, with fewer blocked builds and less scanner noise. WizOS is available to customers in private preview.