Currently, WSL provides a solid base for developers needing a Linux environment within Windows. However, in a business environment WSL can expose an organization to supply chain attacks and privilege escalation.

I see two capabilities that would really enhance the overall security of using WSL:

• Image Attestations and Validation (ensuring only a trusted image is used)
• Ability to host and install images from an artifact repository such as Artifactory or Nexus.

Additionally, restricting where images can be pulled would be even better.