Many good security tools provide securing container runtime configuration, and benchmarks from the Center for Internet Security (CIS) are clear and prescriptive. Ensuring that your container images are free of vulnerabilities is much harder—especially when the image is largely based on open-source components. Four types of tools are commonly used to detect software vulnerabilitie