If I was a Chainguard customer I would be very worried that they seem to notknow how image scanners work.
If I was a security scanner company I would probably give Dan a call as well, as he is basically saying that you can make an image look like it has zero CVEs - just by changing its label - thats not how it works Dan.
And finally - changing the name of the distro is exactly how Chainguard is reducing their CVE count with their Wolfi distro...
to the respondants above - you are right - that lacked nuance
Look at the maintainer lists of containerd and moby, which are used by loads of others, several docker employees on those lists - I didn't check what their amount of involvement is compared to other companies, nor whether they are even sanctioned by docker to do the work, but afaik those projects came out of OCI with Docker as one of the primary backers.
Seems like (according to the author) whatever docker is doing it is a sign of their immediate demise and everyone on HN is cheering for the company to go down in flames no matter what.
The tech is open source and free forever - thats somehow a problem?
The company monitised enterprise features, while keeping core and hub free - also a problem?
Is exploring AI tools, like everyone else is? should they not? should they just stay stagnant?
Has made hardened images free instead of making that a premium feature only for people in banks? - and monitising SLAs, how is that a problem?
Docker is still maintaining the runtime on which orbstack, podman etc are all using, and all the cloud providers are using, but apparently at the same time Docker is deeply irrelevant and should not make money - while all of us on HN with well paid tech jobs get to have high thoughts on their every move to pay their employees and investors...
If I was a security scanner company I would probably give Dan a call as well, as he is basically saying that you can make an image look like it has zero CVEs - just by changing its label - thats not how it works Dan.
And finally - changing the name of the distro is exactly how Chainguard is reducing their CVE count with their Wolfi distro...