Audun Mo (he/him) on Mythryl: “I learned about Docker ONBUILD the other day. You can sneak build…”

I learned about Docker ONBUILD the other day. You can sneak build instructions into downstream image builds. I think this is really scary, and it seems to be not very well understood I wrote about how it can be dangerous, and how to defend against those attacks www.o3c.no/knowledge/un...

o3c.noUnmasking the Docker ONBUILD Supply Chain Attack VectorDocker's ONBUILD directive is a feature designed to reduce boilerplate in downstream images. This article demonstrates how a compromised or malicious base image can exploit ONBUILD to intercept build-...

5/5/26, 10:43 am0 reposts1 like

Post