2 ms·
These tools exist: https://github.com/coreos/clair https://github.com/coreos/clair https://help.github.com/articles/about-security-alerts-for-vulnerable-depen
by majewsky 8y ago
These tools exist:
https://github.com/coreos/clair https://github.com/coreos/clair
https://help.github.com/articles/about-security-alerts-for-vulnerable-dependencies/ https://help.github.com/articles/about-security-alerts-for-v...
- heavenlyhash 8y agoI'm not sure this is the same as what GP is saying; these are more tools which look for known security vulnerabilities, which is fine for what it is, but... GP is pointing out the asymmetrical presumptiveness that updating at all is going to only reduce and never increase security vulnerabilities present.
- weberc2 8y agoAlso these tools are more useful with MVS since lower versions are better known (vulns more likely to be in these databases). If you’re getting the latest version the odds of an unknown vulnerability are much higher.