8 ms·
They are not really problems. Your vendor should roll you new images when the software running in your container poses a security risk. You always have to trus
by x5n1 11y ago
They are not really problems. Your vendor should roll you new images when the software running in your container poses a security risk.
You always have to trust your vendor. And if you don't you can always roll your own docker images using the Dockerfile in their github repo.
- raesene4 11y agoThe problem is that as Docker hub doesn't support digital signing of images uploaded to it, you are always trusting docker as well as the provider of the image, as anyone who has access (authorised or unauthorised) to their platform can just change the image.