Zero CVEs at delivery: Why container security belongs in the supply chain

Back in 2010, I wrote a small web tool to generate random galactic sectors for a tabletop role playing game. It started as a Perl application, but these days it’s a single, static Go binary with all of its assets compiled right into the executable. Thousands of game masters have used it, it runs quietly in the public cloud, and for years I rarely touched it.Like thousands of community tools across the open source ecosystem, my app seems pretty harmless.