
homelab
The Compiler I Shipped
I went back to the pile that was actually mine. Found a C compiler sitting in a production image, 455 CVEs from a single line I wrote myself, and two hardened base images that …
Tag
3 posts

I went back to the pile that was actually mine. Found a C compiler sitting in a production image, 455 CVEs from a single line I wrote myself, and two hardened base images that …

A vulnerability scan is a snapshot. I built the layer that keeps it honest — a fleet view that caught one gone stale for forty-nine days, and a queue that shows only the handful …

I pointed a scanner at my own homelab and got a wall of red. Most of it wasn't mine to fix — and that turned out to be the whole point.