Base Image Updates & Supply Chain Security
Upstream image links for templates are updated periodically. These images might not include the very latest security patches right away. If you need updates sooner, apply updates by yourself, e.g.,
sudo apt-get update
sudo apt-get dist-upgrade
sudo softwareupdate --install --all
# For a specific update
softwareupdate --list
sudo softwareupdate --install "Name of the Update"
Alternatively , you can set the upgradePackages in your template to true for most Linux distributions (except alpine-iso, for example).
⚠️ Rapidly updating can reduce exposure to known CVEs, but it can also increase exposure to upstream supply chain compromises (for example, the XZ backdoor).
Security model
Reporting vulnerabilities
See https://github.com/lima-vm/.github/blob/main/SECURITY.md.