So github response to the recent TeamPCP hacks is good. I wonder if threat actors will be moving to compromise OCI images instead, as the mutability of tags in Docker presents a similar vulnerability as the mutable tags in git releases do
1 repost0 likes