How does it work that some service that most people never heard of distributes (paid) images with alleged fix for vuln 24h before official vuln fix/image is available? Seems somewhat shady.

▲

windowsworkstoo a day ago | parent [-]

thats chainguard’s entire value prop (they are quite well known in this sphere)

	▲	jsploit a day ago \| parent [-]
		Good luck getting them to fix broken packages though.