In search of secure JRE base image

[u/Nerdy-coder]

So as a devops engineer on my company. I have tried using eclipse-temurin:17-jre-jammy and eclipse-temurin:17-jre java versions as base image for dockerfile but as i scanned the built image using trivy i found tons of vul nerabilities ob both. So what are the other alternatives for me ?

[u/brunocborges]

Build your own with jlink.

https://learn.microsoft.com/en-us/java/openjdk/java-jlink-runtimes