Repository navigation
Replies: 2 comments 2 replies
|
We do, since sometimes an up-to-date image is not available in repositories while RPM with the fixes is available in the repositories used for the updates. |
2 replies
|
Need some more evidence to back that statement. Are you saying that ubi-minimal is not rebuilt when there are CVEs? If that's the case it's not really a good base image to use |
|
No. I'm saying that there is a delay between the CVE fix is available in RPM and publicly incorporated in ubi-minimal |
|
How often are the tagged Quay Keycloak images rebuilt? |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
I question if we need to/should run microdnf update in the container. Should we not be able to expect the ubi-minimal base-image to be updated regularly, and most importantly to fix CVEs?
keycloak/quarkus/container/Dockerfile
Line 24 in cfddcad
All reactions