this post was submitted on 24 Feb 2025
639 points (97.8% liked)

Programmer Humor

20763 readers
2674 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] roofuskit 2 points 15 hours ago (1 children)

They worry about someone replacing the docker image on the hosting server with a malicious modified version for people to pull down during updates.

[–] [email protected] 7 points 14 hours ago (1 children)

This worry exists for literally every 3rd party dependency, not just docker, and is addressed the same way - by running tests and vulnerability scans in a sandboxed test environment before shipping to prod

[–] roofuskit 2 points 14 hours ago (1 children)

I was just answering a question. I had the same response above.

[–] [email protected] 2 points 13 hours ago

And I was just adding extra details