Oof, I have been there on dumb PCI "fixes"! But my big concern here is, "How do Docker users stay on top of vulnerabilities?" And I worry that for many of the

Oof, I have been there on dumb PCI "fixes"! But my big concern here is, "How do Docker users stay on top of vulnerabilities?" And I worry that for many of them, the answer is that they don't. Or they just update their image when a new version comes out. And the latter answer could actually be a big win for security... provided Docker image maintainers are staying on top of vulnerabilities. Is the Docker infrastructure doing a good job of policing that? Of highlighting images that have known vulnerabilities? Lots of people are replying that the article doesn't give any details about which vulnerabilities. That's valid, but is Docker giving details about known vulnerabilities?