Container security has spent a decade producing findings. A scanner flags a CVE in a base image, a developer checks…