KubeCon + CloudNativeCon India 2026

Stop drowning in CVEs for unnecessary components. 87% of container vulnerabilities hide in packages never loaded at runtime, inflating security backlogs and enabling "Living off the Land" attacks.

Adopting minimal base images often triggers the "Middle-Tier Trap" at scale. If 100 microservices share a custom dependency, platform teams must either bloat the global corporate base image or force developers to maintain fragmented, unpatched Dockerfiles.

In this session, we will break the patching treadmill using Cloud Native Buildpacks (CNB) to architect a federated "Patching Waterfall." Attendees will learn:
- Tiered Inheritance: Using CNB Custom Builders to compile and cache heavy, domain-specific dependencies exactly once.
- OS Rebasing: Leveraging CNB's superpower to instantly swap the underlying OS for hundreds of apps in milliseconds, flowing security patches without triggering application rebuilds.
- Day-2 Ops: Securely debugging "distroless" builds via Ephemeral Containers.