I just wrote a post on this. We have an eBPF + SBOM based security tool and it r...

robszumski 12 months ago | parent | context | favorite | on: Bottlerocket – Minimal, immutable Linux OS with ve...

I just wrote a post on this. We have an eBPF + SBOM based security tool and it runs great due to hooking the kernel directly via Kube DaemonSet: https://edgebit.io/blog/base-os-vulnerabilities/

tl;dr: Amazon prioritizes patching really well, fixing real issues first