but is docker the solution, though? I don't think so, docker itself is prone to supply chain attacks from my understanding