Because a static image scanner flags every known vulnerability in a package regardless of whether that package ever gets loaded, executed, or reached once the container is running. A base image can carry two dozen theoretical security vulnerabilities that create… Read More "Reduce Dwell Time with Container Security Monitoring"