Comment Comment by OptionOfT If the base image I use is based on Debian, it comes with more than 15 binaries that I don't use.But when Docker scans my image and notices that there is a CVE in one of those binaries, my image is currently out of compliance.FROM scratch just reduces the surface. parent OptionOfT 4 months ago
But when Docker scans my image and notices that there is a CVE in one of those binaries, my image is currently out of compliance.
FROM scratch just reduces the surface.