Hacker News Reader

It can be an issue if you are using gitlab as your container/package registry and production workloads need to pull from it, though.

They should be pulling from a pull through scanning repository cache anyway, so they can be scanned before going into production.