---
title: "Discussion on \"A CVE just hit your base image. Your scanner won't tell you which repos to fix.\" | Hashnode"
description: "Discussion on \"A CVE just hit your base image. Your scanner won't tell you which repos to fix.\". A scanner finds the vulnerable base image — not the repos you patch. Why base-image CVE remediation is a cross-repo source problem, and how to get the list."
url: "https://hashnode.com/posts/a-cve-just-hit-your-base-image-your-scanner-won-t-tell-you-which-repos-to-fix/6a2ffde9365b098b44e4577a"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [A CVE just hit your base image. Your scanner won't tell you which repos to fix.](https://riftmap.hashnode.dev/a-cve-just-hit-your-base-image-your-scanner-won-t-tell-you-which-repos-to-fix?utm_source=hashnode&utm_medium=feed)

A scanner finds the vulnerable base image — not the repos you patch. Why base-image CVE remediation is a cross-repo source problem, and how to get the list.

Jun 15 · 11 min read · riftmap.hashnode.dev  
Read the article

-   [#docker](https://hashnode.com/tag/docker)
-   [#base-images](https://hashnode.com/tag/base-images)
-   [#cve](https://hashnode.com/tag/cve)
-   [#vulnerability-management](https://hashnode.com/tag/vulnerability-management)
-   [#devsecops](https://hashnode.com/tag/devsecops)
-   [#platform-engineering](https://hashnode.com/tag/platform-engineering)
-   [#blast-radius](https://hashnode.com/tag/blast-radius)

## Written by

[Daniel Westgaard](https://hashnode.com/@danielw)

@danielw · Oslo, Norway

  
[View profile](https://hashnode.com/@danielw)

Developer with a passion for building and development - currently building Riftmap, https://riftmap.dev

Developer with a passion for building and development. Currently building Riftmap - https://riftmap.dev

## Responses

Markdown supported · ⌘↵ to post

No responses yet.