How Chainguard Creates Container Images with Low-to-No CVEs

In this video, we go over how we are able to create container images with low-to-no CVEs, and how you can utilize them.
Check out Chainguard Images: images.chaingu...
Learn more: www.chainguard...
About Chainguard
Founded by the industry's leading experts on open source software, security and cloud native development, we are on a mission to make the software supply chain secure by default.
Where to find us:
Website: www.chainguard...
Twitter: / chainguard_dev
LinkedIn: / chainguard-dev
TikTok: / chainguard_dev

[@Drewbernetes]

It might be a "business secret" to Chainguard but worth asking 😜.
Do you build everything from source then?
Also what happens if a flux dependency, say one of the Go modules that it uses, has a vulnerability? Do you essentially rebuild everything yourselves, or is it something you'd have to wait for the flux maintainers to update?
I always use Chainguard images where possible and love the work you're all doing over there!