You can scan the file system, probably thats what AWS ECR does? At the end of they you need to keep an eye on file integrity, because of rootkits, config integ

You can scan the file system, probably thats what AWS ECR does? At the end of they you need to keep an eye on file integrity, because of rootkits, config integrity… Yeah there are many wats to approach to this… with its corresponding costs of course