advancedTop 100 Interview Questions
Why is image scanning (e.g., Trivy, Grype) part of a secure CI/CD pipeline?
It automatically detects known CVEs in OS packages and application dependencies baked into an image before it's deployed, allowing a pipeline to block releases with critical vulnerabilities rather than discovering them only after the image is already running in production.
Ready to master this question?
Generate a complete walkthrough — background, the full answer in plain language, a working code example explained line by line, a real-world scenario, common mistakes, and how this same question gets asked in different ways.
Sign in to generate a response