Building untrusted container images safely at scale

1 Telstrom90 3 6/26/2025, 6:22:05 PM depot.dev ↗

Comments (3)

adastra22 · 7h ago
I'm confused--what's the security risk in building a container?
Telstrom90 · 5h ago
You're running untrusted code. Every RUN command in a user's Dockerfile is executed during build, which means you're executing arbitrary commands from strangers on your own infrastructure. If you're not isolating that properly, it's a security risk.
adastra22 · 2h ago
Inside the container though. The whole point of which is that it sandboxes and isolates the running code.