3 ms·
It removes the references to the base image. I don’t see any benefits. Security scanners have a harder time to track issues, because they can’t just detect the
by andix 3y ago
It removes the references to the base image.
I don’t see any benefits. Security scanners have a harder time to track issues, because they can’t just detect the image is depending on an insecure base image.
It also strips the possibility to deduplicate some base layers, or a partial pull if you already have one of the base layers in the cache (Debian or Ubuntu are very common, you might have even the exact same version already in the layer cache).
- c-hendricks 3y agoWould any changes to the tag get pulled with `docker build --pull`?