Software security teams can face an overwhelming influx of vulnerability alerts, often stemming from non-essential packages bundled inside traditional container base images. When developers inherit base images packed with unneeded tools, shells, and package managers, security teams end up triaging noise, and developers end up burdened with Common Vulnerabilities and Exposures (CVE) remediations. To ease this friction and help organizations move toward a zero-CVE strategy, container infrastructure requires a purpose-built starting point that cuts away unnecessary attack surface from day one.To
This article has been indexed from Red Hat Security
Read the original article: