Docker and CI/CD · Senior · Question 14 of 75
Why rebuild images regularly even when your code hasn't changed?
- 1Because the layer cache expires and images stop working
- ✓Correct answer: To pick up security patches in the base image and OS packages
- 3Because registries delete images that are older than 90 days
Explanation
CVEs are found in base images all the time. Scheduled rebuilds plus automated base-image update PRs keep running images patched.