Hacker News Reader

yeah, I guess thats how Docker does it. Automated builds tied to a github repo.

That lets you trust the image. Trusting software which is actually running somewhere seems harder.