2 years ago

In our container-driven tech world, it’s vital that our container’s base image, the foundation we use in creating our working container images, must be as clear of bugs as possible. Alas, they’ve found that some “popular base images can have hundreds of known security vulnerabilities.”

It’s only common sense for developers to choose base container images wisely.

Borrowing on the idea of technical debt, Chainguard describes these base image vulnerabilities as “security debt.”

Therefore, Chainguard proposes that container base image developers should work towards the creation of “quiet” base images.