Hacker News Reader

Why are you not using a registry mirror/cache (eg jfrog artifactory, etc)? Own your supply chain.

When that cache has to update it will make more than 10 pulls.

Exactly this. And when a base image has a new release, all images based on this will also need an update