• 43 Posts
  • 1.41K Comments
Joined 2 years ago
cake
Cake day: July 7th, 2023

help-circle










  • Secure how? Containers aren’t secure because of their base contents since the majority of everything in the image isn’t even executed. It’s not like running an OS.

    A secure container by definition will be the one with the LEAST amount of contents in its base. This is the point of Distroless.

    A container is going to get compromised because of its running code 9/10 times, not because the base was compromised. This of course is not including supply chain attacks.

    Any podcast telling you that adding more stuff into the container image will make it secure has an inferior bridge. Come check out my much better bridge over here…