BlogsGrabDistroless Image Adoption and Testing Automation

Distroless Image Adoption and Testing Automation

Distroless Image Adoption and Testing Automation

1
posts
2026

Grab is systematically migrating services to Distroless images to enhance security by reducing the attack surface. This involves a rigorous testing strategy to mitigate runtime failures caused by missing dependencies. An AI-powered agent has been developed to automate the scaffolding of medium tests for services lacking them, and to manage the Distroless image patching and verification loop. This automation significantly accelerates the adoption process and ensures the reliability of migrated services.

2026

Scaling out Distroless adoption With AI

7/24/2026

This post introduces an AI-driven approach to scale Distroless image adoption across Grab's services. It details the technical challenges of runtime failures due to missing dependencies in Distroless images and outlines a 'medium test' methodology for verification. The core innovation is an AI agent that automates the creation of these medium tests for services that don't have them, and then manages a 'Patch-Test-Compare' loop to safely migrate services to Distroless images. Key technical components include the use of Claude Code, skills-based agent design, Model Context Protocol (MCP) for integrations with GitLab and Sourcegraph, and token-efficient communication strategies.