Your Kubernetes cluster is running images your registry scan never checked

The post Your Kubernetes cluster is running images your registry scan never checked appeared first on Anchore .Most container security programs put real effort into scanning images before they reach a registry, then treat the job as done. That’s a reasonable place to focus, but it leaves something out: what’s declared in a manifest and what’s actually running in a live cluster can drift apart fast. An image gets patched in the […]