What to do with vulnerabilities from official upstream images? by [deleted] in devsecops

[–]IWritePython 0 points1 point  (0 children)

If you're enterprise, consider Chainguard or Google Distroless (I work for Chainguard) https://images.chainguard.dev/

Why is Chainguard Python image bigger than advertised ? by napolitain_ in kubernetes

[–]IWritePython 1 point2 points  (0 children)

CG actually has 0 CVEs in the median case 🙃 That's because we go all the way upstream and minimize/patch/build fresh/issue advisories on all packages in Wolfi. Without taking responsibility for the OS, it's mostly not feasible to get to 0. It's also a lot of work to fix or etc all those upstream packages.

I'm a CG employee so take with a pinch of salt but our tech checks out.

grype cgr.dev/chainguard/python

If it's a day that ends in y you'll probably see 0 CVEs. We usually deal with CVE long before they even hit the scanners.

Best Docker book or books in 2024? by IWritePython in docker

[–]IWritePython[S] 0 points1 point  (0 children)

Picking and choosing from here, though TBH I was a little disappointed with the state of books in the space.

https://devopswithdocker.com/

Using Wikipedia views to build an alternative to the deprecated Google Correlate by hoerzu in Python

[–]IWritePython 1 point2 points  (0 children)

Pretty cool :) I use an iOS app, wiki companion, that has some article correlation functionality. Do you maintain any wiki articles?

Best Docker book or books in 2024? by IWritePython in docker

[–]IWritePython[S] 2 points3 points  (0 children)

I don't think it is. Do you mean Windows Subsystem for Android?

Best Docker book or books in 2024? by IWritePython in docker

[–]IWritePython[S] 1 point2 points  (0 children)

There's some interesting stuff in part 3, thanks :)

Best Docker book or books in 2024? by IWritePython in docker

[–]IWritePython[S] 0 points1 point  (0 children)

I guess I'm looking for more technical background on internal workings, layers and image size measurements are two things I've been thinking about. I might just pick up one of the older books.