Scratch containers and the supply chain trouble - Naveen S

Description
A containerized app comprises layers, usually containing the OS and its packages, system libraries, application dependencies, and the application itself. Often most of the non-application-related layers are redundant. They also may contain vulnerabilities that are a potential risk of being exploited by someone. Various methods are used today to reduce image size and attack surface. One of those methods involves running statically built binaries in a special container called "scratch". This will remove the need for an OS layer …

app application containers dependencies exploited may non packages risk supply supply chain system today vulnerabilities