[AW Top 10] 02 Consolidate container image CVE burn-down #67447

Priority 2/10 | 14 source issues | Impact 3/5 | Confidence 4/5 | Effort 2/5

One assignment, one coherent fix

Daily container scans open separate CVE burn-down issues for each image, which duplicates work.

Implementation scope

Pin or bump base images per image in one change set, regenerate the pins, and make the scanner update one tracking issue per image instead of new ones.

Done when

• Each burn-down image shows fewer high or critical CVEs after the bump.
• The scanner updates an existing issue rather than creating a duplicate.

Why now

Fourteen open issues track the same recurring activity, and an earlier consolidation was closed and the issues returned. Real CVE counts need rechecking at implementation time.

Unchanged AW sources close only after this summary is completed. Newer source activity and not-planned retirement do not trigger source closure. Assigned summaries are frozen; unassign to allow reclustering.

Generated by AW Essential Issue Clustering · copilot · auto · 40.1 AIC · ⌖ 0.589 AIC · ⊞ 8.9K · ◷