Pulling a container image with a known good digest from an untrusted registry | Hacker News Reader