News for hackers. Stuff that matters.
Re:Write a Good Dockerfile in 19 “Easy” Steps by sneak on Tuesday April 27, 2021 @08:24PM (#26963886)
This misses the most important security step of all: when you specify an exact tag, instead find the hash of the specific image and use that instead, e.g.:

    FROM ubuntu@sha256:01234567...