I always had an ambivalent opinion about #SecurityScanner. When using more and more containers, more automation is certainly required. But those scan results should be take with a grain of salt.

As I learned today, the results of #CveScanners not comparable between distributions: https://github.com/docker-library/python/issues/708#issuecomment-1295196071

There is often more than meets the eye.

Include Ubuntu as a variant for faster patch releases · Issue #708 · docker-library/python

When using security scanners, there are often complaints about unfixed CVEs in the Debian image. Debian, for better or worse, seems to value increased stability, leading to more, older (found) bugs...

GitHub