Re:Docker Apology
by tyingq on Thursday March 16, 2023 @05:18PM
(#35188816)
Both sound like "you won't be able to update them", so images sort of permanently squatted and growing tech debt, potentially vulnerabilities, etc. They should really allow for configuring the ":latest" tag to raise a 404 or something if this is what all that means.
[ Parent
| on HN ]
By replying on a tag for your security you're opening yourself up to vulnerabilities.
Relying? I was assuming a 404 for "latest" might cause people to look into what happened with the image and find it's new home. Without locking them out of specific versions if they needed them for some reason.