What strategy do you follow to review and fix hundreds of vulnerabilities in a container base image at scale?