TBH you'd have the same problem if you based your image off an intermediate Debian/Ubuntu-based image. I always build my images directly off Alpine anyway, or

TBH you'd have the same problem if you based your image off an intermediate Debian/Ubuntu-based image. I always build my images directly off Alpine anyway, or a base image that I control. (In this case though, the security fix is for the apk-tools package and not the distro itself, so as long as you have apk update+upgrade in your final build, whether the intermediate images are rebuilt doesn't matter.)