[hinkley]

I have a situation at work where someone keeps reporting CVEs to me and I don’t think they get that our docker base image gets automatically rebuilt every so many days and picks up all the fixed from Alpine. If we do nothing that window will close itself in a few days. So do you think we need to drop everything and work on this or just wait?

Sounds like Mastodon is missing some engineering discipline and maybe this is a good time for some to show up. Fixing some of this stuff before Twitter gets even worse would be a good thing.