rmohr/docker-activemq

Downloaded packages must be validated in the image

Closed this issue · 1 comments

It is a good idea to ensure that the distribution in the image has not been compromised probably checking hash values and/or gpg signatures.

rmohr commented

Is now happening, starting from the 5.15.x series on.