4 ms·
No security team can defend against unknown or any degree of unbounded controllers. Everybody has a risk tolerance of some degree. Moreover, it seems you're st
by DCKing 8y ago
No security team can defend against unknown or any degree of unbounded controllers. Everybody has a risk tolerance of some degree.
Moreover, it seems you're stating that "no tolerance" should focus on having no CVEs in container images. Does the CVE database really have that level of authority for people? It seems like the wrong thing to focus on even in these hypothetical no tolerance situations, I'm really not sure what to tell you there.
- spydum 8y agoI mostly agree that it’s nearly impossible to end up with a container image with zero CVEs listed unless you are some sort of wizard. However I think images being built and deployed when there is an available patch is foolish (CVEs without patches are different story).