Many fewer CVE tickets let me focus on real work
What do you like best about the product?
My team had a huge backlog in JIRA of CVEs we had to remediate. Resolving a CVE takes time away from actual work, as we had to wait for the CVE to be resolved, push the fixes, verify the fixes were passing security scans, then finally backport fixes to old releases we maintained.
It all took a long time, was a major effort, and didn't scale well as we had more CVEs than I want to admit :D.
Migrating from our team's existing images to chainguard only took about a day, and now using chainguard images totally saves us from having to deal with these CVEs, and lets us work on actual business problems, and not have to try to figure out how to patch some obscure lib install.
It all took a long time, was a major effort, and didn't scale well as we had more CVEs than I want to admit :D.
Migrating from our team's existing images to chainguard only took about a day, and now using chainguard images totally saves us from having to deal with these CVEs, and lets us work on actual business problems, and not have to try to figure out how to patch some obscure lib install.
What do you dislike about the product?
Sometimes, it's tough to troubleshoot live issues where you need to do kubectl exec into a pod. This is a somewhat rare edge case, but it's something we've run into.
It's also sometimes hard to get certain packages fully working (eg a python pandas packages needs a driver which may not be present in the base image).
It's also sometimes hard to get certain packages fully working (eg a python pandas packages needs a driver which may not be present in the base image).
What problems is the product solving and how is that benefiting you?
Resolving CVEs and keeping images secure so that I don't have to.
There are no comments to display