➡️How does Chainguard produce zeroCVE, secure base images?
💡Best Practices. Which boils down to:
1. Fast updates from upstream
2. Build from source with security-focussed build options
3. Default to memory safe options e.g. rustls
4. Automate the sh*t out of the process