TechPrufer
Get started
Grab
Grab logoGrab · Feature trail

Distroless Image Adoption and Testing Automation

1 post · Jul 2026

What this trail covers

Grab is systematically migrating services to Distroless images to enhance security by reducing the attack surface. This involves a rigorous testing strategy to mitigate runtime failures caused by missing dependencies. An AI-powered agent has been developed to automate the scaffolding of medium tests for services lacking them, and to manage the Distroless image patching and verification loop. This automation significantly accelerates the adoption process and ensures the reliability of migrated services.

All Grab trails
  1. Scaling out Distroless adoption With AIThis post details the evolution of Grab's Distroless image adoption strategy by introducing an AI-powered agent to automate the scaffolding of medium tests for services that previously lacked them. The agent uses a multi-phase workflow (Detect, Scaffold, Fix, Raise MR, Monitor CI, Repeat) guided by skills and integrated with tools like Claude Code, Glean, and Sourcegraph via MCP. It focuses on test files and CI configurations, ensuring guardrails and human review before merging. The AI also assists in the 'Patch-Test-Compare' loop by identifying OS-level package dependencies, generating multi-stage builds, and verifying changes with existing medium tests.