Skip to content

Commit db1fb1e

Browse files
authored
Description for Reduction of the attack surface
1 parent f8f0359 commit db1fb1e

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

src/assets/YAML/default/BuildAndDeployment/PatchManagement.yaml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,6 +89,12 @@ Build and Deployment:
8989
evidence: ""
9090
comments: ""
9191
Reduction of the attack surface:
92+
description: |-
93+
Distroless images are minimal, stripped-down base images that contain only the
94+
essential components required to run your application. They do not include package
95+
managers, shells, or any other tools that are commonly found in standard Linux
96+
distributions. Using distroless images can help reduce the attack surface and
97+
overall size of your container images.
9298
risk: Components, dependencies, files or file access rights might have vulnerabilities,
9399
but the they are not needed.
94100
measure: Removal of unneeded components, dependencies, files or file access

0 commit comments

Comments
 (0)