practitionerSoftware Supply Chain
Sign containers and avoid root
Said by Brian Andrzejewski ·
“I learned quite a bit about containers that I didn't realize, and I'm going to go start telling anyone in the IoT space, Brian said you should look at this maturity model and you should build your software in containers so that it's signed and don't make it run as root and control your system calls.”
Transcript evidence from Brian Andrzejewski -- Containers Again.