[ragingroosevelt]

Why are you not using a registry mirror/cache (eg jfrog artifactory, etc)? Own your supply chain.

[RobotToaster]

When that cache has to update it will make more than 10 pulls.

[keisborg]

Exactly this. And when a base image has a new release, all images based on this will also need an update