Distroless images by Google contain only the application and its runtime dependencies, stripping out package managers, shells, and other OS-level utilities to minimize attack surface and image size. The smallest variant (gcr.io/distroless/static-debian12) is roughly 2 MB. - View it on GitHub