3 ms·
People seem to like them just fine != People are patching CVEs
by ethbro 6y ago
People seem to like them just fine != People are patching CVEs
- marcinzm 6y agoThat's a question of process and tooling. Plenty of software, OSS and proprietary, which scans containers for vulnerabilities and sends out alerts. There's also dependabot that automatically creates PRs when dependencies get new versions. Sure people may not use the tools they have but then again people also don't upgrade their OS packages or maven packages. So for those people packaging everything doesn't hurt any more since they've got rampant CVEs already.