Why do our container base images have so many CVEs, and how can we reduce them?
Our Python, Node, and JVM containers pick up hundreds of findings from their base images, including some high-severity ones. We use standard runtime images and add a few…