Context
We currently do not have any mechanism in place to scan our Docker images for potential vulnerabilities once they have been built. Given that we already leverage Trivy in Nebari to scan for IaC misconfigurations, it would be worthwhile to extend its use here to scan the images after they have bee built.
Value and/or benefit
This would help us identify and remediate new and existing vulnerabilities in our different images.
Anything else?
No response