[cdxgen-secure] Anyone using this image in production?

[prabhu]

The image comes with some sane secure defaults. Plus it uses CMD instead of ENTRYPOINT, so ideal for use as an image to run the build tools such as maven, npm, etc in CI environments.

https://github.com/CycloneDX/cdxgen/blob/master/ci/Dockerfile-secure

Let us know how we can improve this image, so that we can secure all other base images as well over time.