Embed Notice

@alxlg A container image is a bunch of bytes, itself the result of a complex computational process: running ‘apt install’, building software, etc.

If all you have are those bytes, you cannot tell where they come from—just like when given a cake, you can at best guess what ingredients it contains, but you cannot tell whether it contains Novichok nor derive its recipe.

@zimoun @adamhsparks