https://plumephp.com/tags/%E9%95%9C%E5%83%8F/Recent content in 镜像 on PlumePHPHugozh-CNSun, 27 Sep 2026 12:00:00 +0800https://plumephp.com/kubernetes-image-build-security/Sun, 27 Sep 2026 12:00:00 +0800https://plumephp.com/kubernetes-image-build-security/<p>镜像既是应用的分发载体，也是<strong>攻击面与信任边界</strong>。镜像小了、安全了、可验证了，部署才谈得上可靠；镜像里藏着漏洞、悬空的基础镜像、无签名来源，等于把后门和风险一起交付。本指南从<strong>构建</strong>到<strong>扫描</strong>再到<strong>签名与供应链信任</strong>，建立一条「构建得快、镜像得小、来源可验、内容可信」的镜像产线。</p>