Re:The most popular docker images each contain at least 30 v...
by gpm on Tuesday February 26, 2019 @05:04PM
(#19258735)
'My image has zero vulnerabilities! (it's a proprietary terminal that's reachable from the public internet)'.
The flip side of "this reports too many vulnerabilities" is "this reports too few vulnerabilities", it should always be made clear we are talking only about publicly known vulnerabilities, which is a subset of all discovered vulnerabilities, which is a subset of all vulnerabilities.
The flip side of "this reports too many vulnerabilities" is "this reports too few vulnerabilities", it should always be made clear we are talking only about publicly known vulnerabilities, which is a subset of all discovered vulnerabilities, which is a subset of all vulnerabilities.