Most small teams that ship Docker images never check them for known vulnerabilities. Here's the free check I built into my own pipeline.
On every push, a GitHub Actions job builds the image and scans it with Trivy, an open-source scanner. If it finds HIGH or CRITICAL CVEs, the...