the quest for the slimmest docker image

We used to ship our application to our customer on a scratch image, with no unnecessary binaries. We were told we had to stop, and switch to a distro of their choice because they couldn't scan the scratch container for security issues. just... what?

i *will* have my discord and matrix bots running in 8mb ram and 20mb filesize