Comment by NewJazz
16 hours ago
It can be an issue if you are using gitlab as your container/package registry and production workloads need to pull from it, though.
16 hours ago
It can be an issue if you are using gitlab as your container/package registry and production workloads need to pull from it, though.
They should be pulling from a pull through scanning repository cache anyway, so they can be scanned before going into production.