Build New Container Images

If you're basing your container images from any available base image, there is a large chance that these images will be updated at some point.

For example, if you are running .NET Core capable docker images, Microsoft have their base images here: https://hub.docker.com/r/microsoft/dotnet/ .

With the Azure Container Registry, you get something called "Tasks" that can help automate this process - it supports automated build execution when the base image is updated.

"Tutorial: Automate container image builds when a base image is updated in an Azure container registry".

Not allowing outdated or vulnerable images in the system, and ensuring that they're always up to date can help mitigate any threats from vulnerabilities.