Gitlab provides public and private projects with their own registry which can host Docker images built by Gitlab's CICD service.
Nevertheless: The base images will be pulled from dockerhub by default and I am not sure we should trust them. Do we have any better alternatives for this?