Loading…
14
A security guy at a Kansas City meetup said pin your CI images by digest, no exceptions
1 comments
Log in to join the discussion
Log In1 Comment
elizabeth_ramirez18d ago
Watched a guy spend two hours debugging a build once and it turned out the base image tag got reused by someone else that morning. Same tag, new bits, broke everything. He switched to digests that afternoon and never looked back.
8