Re:Simple Dockerfile examples are often broken by default
by eyeareque on Tuesday May 28, 2019 @02:17PM
(#20032819)
Not locking it to a specific version is better for security updates. Do you want it to run stable with vulnerabilities or to run secure and broken?
[ Parent
| on HN ]
Re:Simple Dockerfile examples are often broken by default
by bdcravens on Tuesday May 28, 2019 @03:23PM
(#20033416)
> Not locking it to a specific version is better for security updates.
The idea is that you should take responsibility for your containers and verify fixes and test your application.
> Do you want it to run stable with vulnerabilities or to run secure and broken?
If these are your two choices, you have a staffing or a workflow problem.