# Docker and ActiveState pair hardened images with governed software packages

_Published Friday, November 6, 2026 at 6:01 PM EST · Security, Infrastructure · Latest · Tier 2 — Notable_

![Featured image — Primary](https://www.docker.com/app/uploads/2025/03/image.png)

Docker announced a partnership with ActiveState that makes its Curated Catalog available alongside Docker Hardened Images. Docker now resells the catalog, while ActiveState resells Docker's images, extending their distribution arrangements across container foundations and application dependencies.

The integration routes approved packages through governed repositories while preserving familiar package-manager workflows for developers and coding assistants. ActiveState says it builds components from original source code with provenance records and software bills of materials. Its catalog provides remediation commitments of 5 business days for critical vulnerabilities and 10 for high-severity vulnerabilities once an upstream fix becomes available.

Docker says the arrangement complements controls such as pinned versions, cooldown periods and sandboxed agents.

## Sources

- [Docker](https://www.docker.com/blog/docker-activestate-trusted-content/)

---
Canonical: https://techandbusiness.org/newswire/itfX3kqmqvkZur-mJVLta-
Published: 2026-11-06T23:01:49.761Z
Story chronology: 2026-11-05T15:28:22.000Z
Retrieved: 2026-11-07T01:08:29.532Z
Publisher: Tech & Business (techandbusiness.org)