20 ms·
To be clear, one of those lines relates to making sure you pull in upstream during image building. This is super important, as it seems that people have assumed
by jsulinski 10y ago
To be clear, one of those lines relates to making sure you pull in upstream during image building. This is super important, as it seems that people have assumed their base image will be current and that is not always the case.
- LogicX 10y agoSo thats another factor to see if its a pattern: Do the images w/o problems apt-get update && apt-get upgrade And maybe there's an opportunity for a chrome browser extension that can overlay an indicator when choosing a docker image to pick one that uses best practices like that.
- jsulinski 10y agoThere absolutely is a pattern, but the thing is -- even if the image is updated at build, as soon as you deploy it, vulnerabilities begin to emerge.