DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 5 - Container Scanning with Trivy

The previous parts secured the code and the infrastructure. This part secures the container image — the thing that actually runs in production. Code repo: https://github.com/pkkht/devsecops-demo/ What container scanning is The tool: Trivy The demo Dockerfile # ISSUE 1: Using python:3.8 (not slim, no