3 ms·

Run a security scanner against that 3 GB image and tell the devs they have 1,000 CVEs to fix before they can deploy.

• crgwbr 3y ago
  That’s a great way to convince the business to just ignore everything the security team says.
  • tsyklon 3y ago
    Or to implement optimized container images built with best security pratices. That’s the point of his argument btw.
    • crgwbr 3y ago
      Yes, I get that. My point is that you won’t accomplish that by holding the business hostage.