Minimal - An open source project for hardened container images now supports 100 container images and adding more. The images are built daily, with almost 0 to minimal CVEs and trying to provide same level of output as other paid alternatives for free.
Github - github.com/rtvkiz/minimal
I've been looking into ways to update container images in prod more efficiently. Rebasing seems an interesting option. Instead of rebuilding the whole application image we just swap the underlying runtime base, and all the layers on top of that are reused with their digests staying the same. So, faster and less traffic-heavy as nodes can reuse the unchanged layers.
Looks attractive in theory. In practice, rebuilding might seem like a more clear path? Just rebuild everything and test the artifact.
So, do you use rebasing? And if you don't, why not?