I’m talking not only about trusting the distribution chain but about the situation where some services dont rebuild their images using updated bases if they dont have a new release.
So per example if the particular service latest tag was a year ago they keep distributing it with a year old alpine base…
No. I only have a limited amount of time for maintaining my home infrastructure. I chose my battles.
i do look out for new images that could be a drop in replacement
the new no-distro builds of containers is very interesting