Red Hat Security Advisory 2019-0036-01 – Source-to-Image is a tool for building reproducible container images. It produces ready-to-run images by injecting a user source into a container image and assembling a new container image. The new image incorporates the base image and built source, and is ready to use with the “docker run" command. S2I supports incremental builds, which re-use previously downloaded dependencies, previously built artifacts, and more. Issues addressed include a path sanitization vulnerability.