Closed pjbgf closed 1 year ago
Hey @pjbgf! I see your concern. Thanks for your suggestion, we're going to look into publishing distroless images.
@pjbgf Distroless images are now available for Connect!
@jillianwilson thank you for seeing this through and the follow-up. :bow:
Would it be possible for the
connect-api
images to be patched more frequently, or a distroless version of it to be made available, so that its supply chain CVEs are kept to a minimum? Currently trivy is detecting 174 CVEs on the latest version:The latest tag was updated 3 months ago: