Chainguard, Docker Inc’s DHI etc. There’s a whole industry for this.