Silent Rebuilds: Keeping Container CVE Counts Near-Zero

Starting with a slim/distroless container image is necessary today, but it isn't enough. You need daily automation to trigger rebuilds for dependencies and base image digest updates. &ldquo;All that work to slim your image down and using secure base images means little for security if you&rsquo;re not also auto-rebuilding it for every upstream change, including detecting upstream base image digest…