Day in the Life of a Base Image: The Evolution of Vulnerabilities in the Most Popular C...
summary
Analysis of the top 165 Docker Hub images (together accounting for 30% of pull volume) uses daily scans and time series on over 900,000 unique containers with tools like Docker Slim x‑ray and grype, revealing average package counts near 350, some images with thousands of vulnerable entries, and a worrying 20% high or critical share (expectation ~5%). Year over year Python and Rust vulnerabilities rise ~50% while Go climbs ~20%, scan time grows 50 seconds per 500 MB, and scanners report wildly different totals for the same image.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:07About Slim AI and Docker Slim
- 4:36Container knowledge survey
- 9:35Vulnerability research methodology
- 11:43Container complexity findings
- 17:50Vulnerability trends by language
- 21:21Industry challenges and outlook
- 23:50Q&A
related talks
30mWhat We Learned Dissecting the World’s Most Popular Containers
52mThe Life of an Image: Evolution of Vulnerabilities in Popular Containers
34mWhat We Learned Dissecting the World's Most Popular Containers
20mHow Secure is Your Base Image? ...
49mVulnerability Exploitation In Docker Container Environments
35mSecuring Containers by Breaking In
32mWhat Data Tells Us About Software Supply Chain Security & What To Do About It
47mSecuring Containers By Breaking In