2 ms·
You could make the same analogy with github or npm or whatever unvetted repository. Nothing specific to containers here.
by throwaway894345 5y ago
You could make the same analogy with github or npm or whatever unvetted repository. Nothing specific to containers here.
- yjftsjthsd-h 5y agoTo varying degrees yes you can, and should, and those are absolutely worth caution - we do have semi-regular issues with malicious stuff getting uploaded to NPM; that github somehow has escaped major (publicized) problems is the real surprise.
- throwaway894345 5y agoI agree, and to be clear, that's precisely my point--your claim that "Docker Hub makes it easy to download unvetted [executables]" is a property it shares with all unvetted executable repositories--nothing to do with containers in particular. :)