distroless
distroless copied to clipboard
Should a non-ssl base be provided?
CVE-2022-2068 highlights that libssl and openssl are an active CVE service.
It's not clear how many applications need those libraries. Have we considered a non-ssl base image?