Compliance is a big reason for enterprises to adopt buildpacks. It’s hard for organisations to assure all code is built using only approved or up to date depend

Compliance is a big reason for enterprises to adopt buildpacks. It’s hard for organisations to assure all code is built using only approved or up to date dependencies. Dockerfile makes it very easy to package vulnerable libraries and difficult to verify which containers are vulnerable. Scanning works but better to not push vulnerable code in the first place