I'm learning more about container security and keep seeing terms like clean, minimal, hardened, and near-zero-CVE images. They seem related, but I'm not sure where the distinctions are.…
We have a mature operations team with existing pipelines that build container images for a third-party product running on Kubernetes. Our company recently acquired a development team that…
We're an expanding engineering organization currently using Trivy for scanning container images for vulnerabilities in our workloads, like Python, ArgoCD, and Istio. However, we're experiencing significant alert fatigue…
We're facing a major challenge with container CVE vulnerabilities in our production environment. Whenever we pull standard base images, even standard ones like slim or Alpine, we get…
I've been thinking about how many different services often need the same runtime environment. The only thing that usually changes is the executables each service uses. When these…
My team has been struggling with manual SBOM validation for every image update required by our vendor, which takes us over 15 hours a week! We're constantly cross-referencing…
Hey everyone! I'm hoping to find some guidance here. I'm part of an IT team at my company, and we're currently using Lenovo laptops after transitioning from Dells…