Docker files are not reproducible thanks to their native way they timestamp things https://twitter.com/ibuildthecloud/status/1574851193624330240 At least concede that NOT running the latest https://github.com/tenable/terrascan is probably a bad idea when it comes to security posture? Furthermore most Dockerfiles are NOT reproducible because I've yet to see people pin on their apt-gets and apk adds! Get real sheeple. Update from https://twitter.com/nathankpeck/status/1571985889269780480