Introduction In today's DevSecOps pipelines, security can no longer be an afterthought and given short shrift; it must be baked in upfront. Container images, on which today's apps are built, include frequently the operating system packages, the third-party libraries, and the app requirements that may come pre-packaged with known...