Your Images are Out of Date (probably) - The Silent Rebuilds problem

Your Images are Out of Date (probably) - The Silent Rebuilds problem

Author: Bret Fisher March 4, 2026 Duration: 38:59

Container base images (like Official Docker Hub images) are often updated without new tag versions. I call this Silent Rebuilds. There's no way to know this happens without image digest-checking automation like Dependabot and Renovate with specific settings. Failure to keep up-to-date is a prime source of vulnerabilities that can lead to serious security breaches. Automate the updates!

Check out the video podcast version here: https://youtu.be/z_ahbsSc4Fo

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾



★Show Links★


Creators & Guests

You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

  • (00:00) - Intro
  • (05:30) - Docker Security and Image Builds
  • (10:13) - CVEs in Containers
  • (11:39) - Where we were
  • (15:26) - Silent Builds and Mutable Tags
  • (18:44) - Docker Official Image Tags Are Rebuilt Often
  • (21:14) - Chainguard's Tool
  • (21:34) - Tag Tracker Tool Overview
  • (26:13) - High Fivers DevOps Group
  • (28:16) - Problem of Silent Rebuilds
  • (36:33) - Post-Stream Updates

Bret Fisher hosts DevOps and Docker Talk: Cloud Native Interviews and Tooling alongside Nirmal Mehta, pulling conversations directly from their live audience sessions. This isn't a theoretical lecture series; it's grounded in the practical, often messy realities of building and running modern systems. Each episode digs into the specific tools and philosophies shaping infrastructure today, from the foundational elements like Docker and container orchestration with Kubernetes or Swarm to the broader cultural shifts of DevOps, SRE, and platform engineering. You'll hear discussions that span the entire software lifecycle, touching on the integration of security with DevSecOps, the automation promises of GitOps, and what "Cloud Native" truly means for development teams. The dialogue stays focused on actionable insights and real-world use cases, offering a genuine sense of what works and what doesn't in the field. For anyone navigating the container and cloud ecosystem, this podcast serves as a regular, insightful check-in with practitioners and experts, hosted by someone deeply embedded in the community. The natural, interview-driven format makes complex topics accessible, ensuring listeners come away with more than just buzzwords-they get context and clarity.
Author: Language: English Episodes: 100

DevOps and Docker Talk: Cloud Native Interviews and Tooling
Podcast Episodes
DevPod for Dev Containers [not-audio_url] [/not-audio_url]

Duration: 1:01:54
Bret is joined by Lukas Gentele and Rich Burroughs from Loft Labs to look at a new project called DevPod, that supports dev containers and VMs. It works with local Docker instances and AWS, GCP, Azure, and several other…
Docker 2023 New Stuff [not-audio_url] [/not-audio_url]

Duration: 58:05
Bret and Matt are joined by two engineers in Docker's leadership - Chief Technology Officer Justin Cormack and Senior Manager of Developer Relations Michael Irwin, to talk about recent Docker Hub changes, as well as thei…
Contribute to Kubernetes [not-audio_url] [/not-audio_url]

Duration: 55:26
Bret and Matt are joined by Chad Crowell of KubeSkills to walk through how you can contribute to Kubernetes open source.🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engine…
Windows WSL and Containers in 2023 [not-audio_url] [/not-audio_url]

Duration: 1:04:04
Bret is joined by fellow Docker Captain Nuno do Carmo to talk about desktop container solutions and the best Docker setup for Windows 11. 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship…
Calico Networking for Kubernetes and More [not-audio_url] [/not-audio_url]

Duration: 40:58
Bret is joined by Project Calico's Tomas Hruby from Tigera to dig into Calico CNI features for Kubernetes and beyond. 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineer…
Faster Docker Builds with Depot [not-audio_url] [/not-audio_url]

Duration: 42:58
Bret is joined by Kyle Galbraith and Jacob Gillespie, co-founders of Depot, to discuss their new solution to slow Docker builds. 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program f…
Better K8s Prometheus Alerts with Robusta [not-audio_url] [/not-audio_url]

Duration: 51:47
🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new cours…
NGINX on Kubernetes, All The Details [not-audio_url] [/not-audio_url]

Duration: 56:30
🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new cours…
Easy Kubernetes Auth and RBAC with Infra [not-audio_url] [/not-audio_url]

Duration: 48:10
Bret is joined by Matt Williams of Infra to show off their open source project Infra, which provides easy, centralized RBAC, auth to Kubernetes, and more.
Trivy and Tracee, Aqua Security Tools [not-audio_url] [/not-audio_url]

Duration: 42:25
Bret is joined by Anaïs Urlichs of Aqua Security to talk container and Kubernetes security tools like trivy, kube-bench, tracee, and kube-hunter.