I’d love for this to be true. Have you had anyone come in and do an audit? I find crazy stuff when I show up at No Ops shops and poke around.
Still not sure how a corporation who runs RHEL contractually is able to use alpine and ubuntu based containers but it happens.
I dont work there anymore and I am glad because when the containers finally do get an audit and the customer is told for X years they havent been in compliance.... well..
... why would it be a problem ?