Hacker News Reader

You gonna pull a random image into prod and give it access to prod db :)?

It's no more a "random image" than the script itself is a random software.

Also the Dockerfile seems to be in the repo. Looks like it just installs some apt packages and adds the script file: https://github.com/jfcoz/postgresqltuner/blob/master/Dockerf...

it's a lot easier to audit a script

Dockerfile is a script of sorts too you can audit that

Nothing guarantees the image in docker hub has anything to do with the Dockerfile or this repo. This is a valid concern.

Except it does, docker hub builds it with that Dockerfile.

Docker hub allows any user with the appropriate permissions to `docker push` any image they want.

It is just a perl script (in this case), just one that needs 45MB of baggage.