Base image

The image your build starts from, contributing an operating system userland and whatever else its author put in. It is the largest single decision about your image's size and attack surface, and it is inherited silently — most of the findings in a scan report belong to it rather than to anything you wrote. Choosing a smaller base is usually the cheapest security work available to a team.