The post Why Vulnerabilities Aren’t Enough: Threat Hunting Your Open Source Code appeared first on Anchore .If you’ve been in the security universe for the last few decades, you know we love a good vulnerability scanner. We’re great at finding known bads. We have very mature practices to hunt for CVEs, malware, and leaked secrets.