While it requires a bit more work to set up, once running, it continually updates its vulnerability data and can be called upon via API to scan images. The tool’s ability to tie image scanning to runtime context (like “this vulnerable image is running in prod in these clusters”) is invaluable at scale for prioritization. […]