-
Notifications
You must be signed in to change notification settings - Fork 2.9k
Open
Description
I would like to propose using Distroless images as the base for the flannel image. This change would improve security by reducing the attack surface and result in smaller, more minimal images.
There are lot of OS and application level CVE's with Alpine being base image
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
Alternatively, if needed we can have two variants one based on Alpine and one on Distroless, so users can choose the image that best fits their requirements.
Metadata
Metadata
Assignees
Labels
No labels