security

When does a smaller image actually improve security?

prpradeepnyesterday3 replies

Smaller images get treated as automatically more secure. Fewer packages means fewer CVEs reported, but does it mean fewer exploitable paths?

Discussion

papacketdropyesterday

Fewer CVEs mostly reduces triage noise. That's still valuable — real issues get noticed instead of buried.

prpradeepn20 hours ago

Fair point. Signal over noise is a security property in itself.

rorohitm18 hours ago

Removing the shell and package manager matters more than the size number. It limits what an attacker can do after getting in.