Comment by lysace

> The impact was immediate.

> Critical and high CVEs in base images dropped to near zero. Our vulnerability scanners became quieter, with fewer false positives and less noise.

Are there vulnerability scanners that attempt to look for what is actually used, instead of just what is present?