Which critical findings can be fixed today
A Trivy image report has criticals in the OS layer and the app. Use jq to separate fixable from unfixable, and say which ones a rebuild fixes and which need a code change.
Briefing
The release gate blocked orders-api 2.9.0 on critical vulnerabilities. The team wants to know what they can do today rather than argue about the gate.
Trivy reports a FixedVersion when a patched package exists. OS package fixes usually arrive by rebuilding on a fresh base image; application dependency fixes need a lockfile change and testing.
build-01 · Container audit
Type help for the command list and objectives for your tasks. Everything runs in this browser.
Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.