#security (2024-11)
Archive: https://archive.sweetops.com/security/
2024-11-26
Ayman
Hi folks, what is everyone doing to get keep their ECR images updated and free of vulns? Looking for new ideas for image pipeline, esp for nervous engineers.
Darren Cunningham
one account for all new builds and a separate account for all PROD images, only promote to prod automatically for clean scans or when manually triggered (to allow for CVE exceptions)