supply-chain Why registry.gitlab.com Went First: Eight Images, No Exclusions, the Largest CVE Block Queue order for routing registries through Harbor was chosen by value, not size: gitlabcom carries 8 images, zero excluded namespaces, and roughly 1,195 fixable Critical+High findings — the single largest CVE block in the estate.
containers 105 CVEs to Zero in 40 Seconds: What Copacetic Actually Does to an Image Copacetic patched every fixable OS CVE on our fixtures without a rebuild — and left every application dependency untouched. Both halves of that sentence matter.
platform-engineering The Registry Routing Campaign: Two of Nine, and Why It Goes One at a Time Routing upstream registries through Harbor is three separate jobs per registry — create the cache, enable the rule, move the workloads — and the campaign only works done one registry at a time, safest first.
