Your organization has recently embraced a container-based workflow for application development. Your team is responsible for developing multiple applications that are consistently deployed through an automated build pipeline into the production environment. A recent security audit has raised concerns that code pushed to production may include vulnerabilities, and the existing tools for addressing virtual machine (VM) vulnerabilities are no longer applicable in the containerized environment. Your objective is to guarantee the security and patch compliance of all code that goes through the pipeline. What should you do?