Free tools Windows power users keep installed
One-click scans. No signup required.
Google announced the 1.0 general availability of rules_oci on May 5, 2023: an open-source Bazel ruleset for building OCI container images. It supports reproducible build and supply-chain metadata workflows, but using it does not by itself certify an image as secure. The project’s current README describes it as stable and in maintenance mode.
What is rules_oci?
rules_oci is a set of Bazel rules for building container images that follow the Open Container Initiative (OCI) formats. Google’s Appu Goundan announced version 1.0 as generally available in May 2023, describing it as a way to make building images with Bazel simpler and more secure. Google said the work was done with Aspect and the Rules Authors Special Interest Group. Google’s announcement
Bazel is a build system that uses integrity hashes to manage and cache dependencies. Google uses Bazel to build Distroless base images, which are minimal images intended to include only what an application needs at runtime. In this context, rules_oci connects an existing build system to container-image creation and related metadata workflows; it is not a standalone image scanner or a security certification.
How does rules_oci approach container builds?
Google presented rules_oci as an alternative to the older rules_docker approach, which it described as being in maintenance mode in 2023. The design aims to work with OCI formats across container runtimes, avoid a preinstalled Docker daemon, use third-party tools for container manipulation, and avoid tying the ruleset to a particular programming language.
#1 Best Overall
- Valued Carpenter Pencil Set: You will get 2 pcs solid carpenter pencils with 26 piece 2.8 mm refills, 1 replaceable sharpener, 1 plastic storage box.The complete carpenter pencils combination allows you to finish your work faster and more easily
- Deep Hole Marker Pencil: The deep-hole construction pencils adopts 45mm elongated tip design, which is more convenient to mark in the small hole or in other tight areas that other carpenter markers cannot reach
- Carpenter Pencils with Sharpener: The sharpener is screwed into the top of the work pencil, which won't get lost either. Built-in pencil sharpener that keep the lead with pointed and smooth to Improves line of sight in fine work
- Stronger Solid Lead: This work pencil is matched with a 2.8 mm thick lead , which is much thicker and stronger during the drawing process of construction work, it will not break or damage easily
- Marks on Various Surfaces: 3 colors solid construction pencil can marks on various surfaces,such as metal, plastic, wood, paper etc. Ideals for woodworkers, contractors, craftsmen, builders, merchants and masons
The announcement also described support for Bazel’s downloader to fetch remote layers, private registries, multi-architecture images, Windows Containers, signing, and software bill of materials (SBOM) workflows. Those capabilities can help teams incorporate image creation and metadata into their builds, but their practical fit depends on the build environment and the specific rules being used. Google’s announcement
What security benefits did Google report?
Google said the Distroless team saw improvements to its build process, outputs, and security metadata after adopting rules_oci and Bazel 6. The examples were qualitative project experience, not independent benchmarks:
Rank #2
- Ergonomically Designed: Work in tight areas with a compact design that gets into tough spots
- Compact and Lightweight: Both tools are designed to fit into difficult to reach spaces. The 1/4" impact driver has a length of 5.55 in. and weighs just 2.8 lbs, while the 1/2" drill/driver measures only 7.5 in. and weighs 3.6 lbs
- Both the DEWALT impact driver and electric drill driver feature integrated LED work lights with a convenient 20-second delay, ensuring enhanced visibility in dimly lit or challenging work areas
- One-Handed Loading - Keep one hand free with a 1/4 in. hex chuck that accepts 1 in. bit tips
- Power drill cordless with 1/2" single sleeve ratcheting chuck provides tight bit gripping strength, making bit changes faster and more secure
- Signing immutable image digests during the build.
- Using OCI indexes for multi-platform images without a Docker build dependency.
- Improving fetching and caching for remote repositories.
- Embedding SBOMs in signed attestations.
These practices can provide stronger provenance and information for organizations evaluating images. They do not establish that every image built with rules_oci is secure, free of vulnerabilities, or configured correctly. Image security still depends on the base image, application dependencies, build configuration, credentials, signing and verification policy, and how consumers act on the metadata. Google’s description is an account of its own Distroless experience, not a quantified claim of a universal security or performance improvement. Google’s announcement
What is the project’s current status?
The project README currently labels rules_oci “stable in maintenance mode” and says its focus is maintainability and standard container tools. That status is distinct from the 2023 announcement of 1.0 general availability: it describes the project’s present maintenance posture, not a promise of active feature development. rules_oci README
Rank #3
- 【Great Compatibility】This Katerk 1/4 inch hex shank bit holder is specifically designed for 1/4 inch hex shank drill bits. It's compatible with most 1/4 fast hex handles, hex sockets, various electric screwdrivers, and handheld screwdrivers. The bit holder makes it a valuable addition for any handyman.
- 【Secure and Safe】Built with a secure backup nut design, each drill bit holder securely locks onto your bits, ensuring they stay firmly in place. Additionally, our bit holder incorporates a high-quality steel ball rolling design that holds up to several kilograms of weight, ensuring your various drill bits don't fall off.
- 【Easy One-Handed Operation】The bit holder for impact driver allows you to change bits single-handedly, simplifying your workflow. Its multi-color design further allows for quick identification of the drill bit you need.
- 【Compact and Convenient】Thanks to its compact size, this 1/4 inch bit holder is easy to carry around. The bit holder allows for easy attachment to various tools, making this a convenient addition to your construction accessories. The Katerk bit holder is cast from high-quality alloy material, promising a long product lifespan. Despite its rugged strength, the bit holder remains lightweight, making it portable.
- 【Cool Christmas Gift For Men Stocking Stuffers】 This screwdriver bit holder, driver bit holder, impact bit holder, can be given as a gift to your loved one, especially for anyone involved in construction or electrical work. It's a must-have for stocking stuffers for men and women, tools gifts for dad, tech gadgets for men, gifts for dad, gifts for him, gifts for husband, gifts for boyfriend, cool gadgets for men, and cool gifts for dad.
The README also highlights two important limitations for teams assessing it:
- Remote execution and cache data transfer: Passing files and directories as action inputs and outputs can transfer many bytes in remote-cache and remote-execution environments. The project recommends evaluating
rules_imgfor those use cases. - Not a complete rules_docker replacement: The README says most use cases can be accommodated, but identifies
container_run_and_*rules as an example without an equivalent. Check the project’s migration guide against the rules your build currently uses before planning a move.
Signing needs special care: the current README labels image signing a developer preview and says it is not part of the public API. Teams should not treat that feature as a stable public interface without checking the project documentation for a later status change. rules_oci README
Rank #4
- Long Nib and Deep Hole Marker: Our mechanical carpenter pencil with 45mm nib is designed for easy marking of deep holes or narrow areas. These construction pencils are the great choice for woodworking tools, construction tools, carpenter tools, contractor tools, wood carpentry tools and architect tools
- Extra Refills in 2 Colors for Versatile Marking: The construction mechanical pencil comes with 12 extra 2.8mm refills, including 6 red and 6 black refills. The black refill is suitable for light surfaces, while the red wax is perfect for dark surfaces. Our carpenter mechanical pencil makes sure that you'll have an ample supply for extended use
- Built-in Sharpener: Our construction pencil comes with a built-in sharpener to ensure the mechanical pencil tip is always sharp and ready for use. Never buy an extra pencil sharpener again. A great tool for any woodworker pencil, contractor pencils. The refill can easily be extended or retracted with a simple click of the pencils mechanical, allowing you to work more efficiently and accurately
- Portable Clip Design: Our deep hole construction pencil features a portable clip design, easy to carry and attach to your pocket or tool box, so that you can keep the carpenter pencils mechanical close at hand, making it a convenient tool to have on the go. Great gifts choice for carpenters
- Stronger Pencil Lead: The black refills are made of lead, sturdy and smooth. The red refills are made of wax, clear and light. These marking pencils are much thicker and stronger than normal pencils during the marking process of construction work, suitable for various surfaces, such as glasses, metal, boards, floors, walls, furniture, etc. The written marks can be easily wiped with a wet paper towel when needed
Should you choose rules_oci, rules_docker, or rules_img?
There is no universally best option established by the project sources. Compare the tools against your build’s actual needs rather than choosing on the basis of a broad security claim.
| Consideration | What to check |
|---|---|
| Existing build rules | Compare your rules_docker usage with rules_oci’s coverage and migration guidance; some rules, including container_run_and_*, have no equivalent noted in the README. |
| Docker-specific workflows | rules_oci’s documented approach does not require a preinstalled Docker daemon, which may suit builds intended to avoid that dependency. |
| OCI and runtime portability | Google describes rules_oci as following OCI formats across container runtimes; assess compatibility with the runtimes and workflows you operate. |
| Remote cache or execution | Account for possible large transfers when files and directories are action inputs or outputs. The README recommends considering rules_img for these cases. |
| Signing API maturity | The current README calls image signing a developer preview, not part of the public API. |
| Maintenance expectations | The README currently calls rules_oci stable and in maintenance mode; plan accordingly if your requirements depend on new features or active development. |
Google notes that Aspect provides a migration guide, support, training, and consulting for teams adopting rules_oci. For migration planning, the project README and its linked guide are the practical starting points. Google’s announcement · rules_oci README
Quick Recap
Best Value
- Milwaukee Ink all Fine Point Marker, Black, 4 Per Pack
- 4 per pack Features Clog Resistant Marker Tip Writes through Dusty, Wet and Oily Surfaces Durable Marker Tip for Writing on Concrete, OSB and Rough Surfaces
- Clog resistant tip writes on dusty, wet and oily surfaces and is optimized for rough surfaces such as OSB, cinderblock and concrete
- Hard hat clip- attaches for easy access
- Quick dry time with reduced smearing and marking
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
