The latest critical PHP security flaw clearly demonstrates one of the aspects too often neglected in the modern containerized world by naive DevOps. The supply chain needs to be as short as possible, and this is a necessary condition that directly affects any application deployment. Let me explain why.