As a security measure to ensure that viruses and compromised images cannot be downloaded from DockerHub, I thought it would be a good idea if contributors only uploaded the DockerFile. DockerHub could then be responsible for running the DockerFile to create the image.
In this way, we would always have the DockerFile and we would know that the image was created using that DockerFile and therefore a security audit of the images would be easy and secure.
What do you think?