advancedTop 100 Interview Questions
How would you detect if a base image has known critical CVEs before deploying?
Run an image vulnerability scanner (Trivy, Grype, or a registry's built-in scanning like ECR/Docker Scout) against the built image as a CI pipeline step, and configure the pipeline to fail the build if critical/high-severity CVEs are found above an agreed threshold.
Ready to master this question?
Generate a complete walkthrough — background, the full answer in plain language, a working code example explained line by line, a real-world scenario, common mistakes, and how this same question gets asked in different ways.
Sign in to generate a response