tldr - powered by Generative AI

• Container scanning and security is becoming more widely adopted, but the long-term security posture of containers is not well-understood.
• New vulnerabilities arise constantly, and many vulnerabilities fall into a catchall bucket of 'won't fix'.
• The attack surface of popular public container images like Python and NodeJS has changed over the past year, and different vulnerability scanners show different results.
• Developers and DevSecOps teams face challenges in ensuring containerized applications are free from vulnerabilities due to the complexity of containers and manual processes.
• Practical steps can be taken to stay on top of vulnerabilities and prevent the dev process from grinding to a halt.