Hacker News Reader

Run a security scanner against that 3 GB image and tell the devs they have 1,000 CVEs to fix before they can deploy.

That’s a great way to convince the business to just ignore everything the security team says.

Or to implement optimized container images built with best security pratices. That’s the point of his argument btw.

Yes, I get that. My point is that you won’t accomplish that by holding the business hostage.