container
2 posts · all writing
The one finding in 21,075 that attackers already use
Trivy on the 25 most-pulled Docker Official Images, run through Draugr: 21,075 findings, one on CISA's KEV list, 26 with an EPSS score of 0.5 or more, and 2,088 with a fix published.
Most of your container CVEs aren't yours
Scan a 35-line Python app and get 292 findings. 219 come from the base image, and none are fixable by changing your code. What the actionable move is.