News for hackers. Stuff that matters.

A comment on Docker Image Vulnerability Research. Parent comment

Re:Docker Image Vulnerability Research by jsulinski on Tuesday March 14, 2017 @12:23PM (#13868871)
To be clear, one of those lines relates to making sure you pull in upstream during image building. This is super important, as it seems that people have assumed their base image will be current and that is not always the case.
[ Parent | on HN ]
Re:Docker Image Vulnerability Research by LogicX on Tuesday March 14, 2017 @12:31PM (#13868950)
So thats another factor to see if its a pattern: Do the images w/o problems apt-get update && apt-get upgrade

And maybe there's an opportunity for a chrome browser extension that can overlay an indicator when choosing a docker image to pick one that uses best practices like that.

[ Parent | on HN ]
Re:Docker Image Vulnerability Research by jsulinski on Tuesday March 14, 2017 @12:33PM (#13868979)
There absolutely is a pattern, but the thing is -- even if the image is updated at build, as soon as you deploy it, vulnerabilities begin to emerge.
[ Parent | on HN ]