can Seqera Containers / Wave use a minimal-CVE base OS image?
acknowledged
F
Flamingo pink Python
The containers generated by https://seqera.io/containers/ and the wave cli seem to be based on the Docker OS base image 'mambaorg/micromamba:1.5.8-lunar'
I am wondering if its possible to use a base image that has minimal CVE's such as Wolfi https://edu.chainguard.dev/open-source/wolfi/overview/ without compromising the features offered by these services?
You can check the CVE's like this;
docker run aquasec/trivy image mambaorg/micromamba:1.5.8-lunar
docker run aquasec/trivy image cgr.dev/chainguard/wolfi-base:latest
Rob Newman
Flamingo pink Python Thanks for the feature request. Our Wave team is looking into the feasibility of this. One note: the Chainguard Academy have commercial licensing terms with respect to redistribution of images from cgr.dev that they are for development only and not production use, which may limit our ability to use them. Further info
Rob Newman
acknowledged