4 ms·
I just had a call with Josh, a GitLab product manager, that maybe helps with some of your questions https://www.youtube.com/watch?v=k1jK4F4NoBw https://www.yout
by sytse 8y ago
I just had a call with Josh, a GitLab product manager, that maybe helps with some of your questions https://www.youtube.com/watch?v=k1jK4F4NoBw https://www.youtube.com/watch?v=k1jK4F4NoBw
- mfer 8y agoThanks for sharing. Noticed you talked a bit about kaniko. It has some security issues that have been talked about but last I checked not addressed by the kaniko team. How are you dealing with those?
- joshlambert 8y agoThanks for watching mfer! Kaniko certainly doesn't address all of the challenges with building containers securely, but I think it's the best solution available _today_ that supports the common Dockerfile workflow. There are a number of other promising tools like img, but aren't readily usable yet because of a dependency on some upstream PR's. At GitLab, we're trying to think of ways to help developers understand the challenges, as well as provide easy to adopt solutions as these tools become available. Would love your thoughts and feedback: https://gitlab.com/gitlab-org/gitlab-ce/issues/48913 https://gitlab.com/gitlab-org/gitlab-ce/issues/48913