Your Lambda MicroVM CI Images Have CVEs Nobody Can See — Closing the Loop with Inspector, Step Functions, and AWS DevOps Agent
Lambda MicroVM images never touch a registry, so no scanner ever re-checks them for new CVEs. This post builds the "scan-twin" pattern that restores continuous visibility, then automates everything from finding to fix — AI-analyzed issues, a self-opening merge request, and Inspector-verified closure — for about $3/month, with the human merge as the only manual step.
Aug 2, 202615 min read
