4 ms·

But you are getting the advantage of not upgrading a system library and break your Go application because it's not anymore up-to-date with the latest and greate

But you are getting the advantage of not upgrading a system library and break your Go application because it's not anymore up-to-date with the latest and greatest dependency. Unless you built it statically, that's another thing

rovr138 5y ago
Of course, but if you update your docker image, you're in the same boat. The solution shouldn't be don't install security updates. It should be having a workflow that tests and validates security updates before deploying them to production. And you should have this with or without docker.