Google Releases Open Source Bazel Plugin for Container Image Security

The new rules_oci plugin can use trusted third-party toolchains, does not require running a docker daemon already on the machine, and does not include language-specific rules.