Set up known-vulnerability scanning for container images #184
Description
Relates to #136
Summary
Create a default audit command to audit container images (i.e. Containerfile.dev) so as to stay on secure base images.
Suggestions, tips, thoughts are welcome.
Goals
The solution:
- (must) be runnable by anyone.
- (must) allow for ignoring specific vulnerabilities manually.
- (ideally) allows for ignoring vulnerabilities without fixes.