At 14:32 UTC on March 12, 2024, our team deployed a Docker image with 14 critical CVEs and a misconfigured entrypoint to production, causing a 100% error rate for 47 minutes, $42k in SLA penalties, and 12 angry customer support tickets.

🔴 Live Ecosystem Stats

⭐ moby/moby — 71,512 stars, 18,922 forks

Data pulled live from GitHub and npm.

📡 Hacker News Top Stories Right Now

Ghostty is leaving GitHub (2031 points)

Bugs Rust won't catch (56 points)

Before GitHub (342 points)

How ChatGPT serves ads (219 points)

Show HN: Auto-Architecture: Karpathy's Loop, pointed at a CPU (46 points)

Key Insights

Trivy 0.50 reduced CVE scan time by 62% compared to 0.48 in our 1.2GB image benchmarks

Harbor 2.10's new OCI artifact signing integrates natively with Trivy 0.50's SBOM output

Implementing pre-push Trivy scans in our CI pipeline saved $18k/month in SLA penalties within 30 days

By 2025, 70% of enterprise container registries will enforce mandatory SBOM signing for all production pushes, up from 12%…