> What's the point of an python:3.9 image, when it's never actually updated? The library images are usually kept current. For instance, python:3.9 tag was last

> What's the point of an python:3.9 image, when it's never actually updated? The library images are usually kept current. For instance, python:3.9 tag was last updated 6 days ago according to [1]. What's true is that you don't get those updates unless you actively rebuild your own images that are based on those library images. That's why you want some sort of continuous vulnerability scanning in your toolchain. [1] https://hub.docker.com/_/python?tab=tags&page=1&ordering=last_updated&name=3.9 https://hub.docker.com/_/python?tab=tags&page=1&ordering=las...