Red Hat Hardened Images Now Scannable in AWS Inspector and ECR: Container Security Implications
Container security teams increasingly drown in vulnerability alerts generated by bloated base images. Red Hat’s recent announcement that its Hardened Images are now supported in the AWS InspectorScan API and Amazon ECR Basic scanning directly targets that noise. By stripping non-essential packages, shells, and package managers from the starting layer, these images shrink attack surface and support a zero-CVE mindset. For hosting providers, DevOps teams, and enterprise sysadmins running workloads on AWS ECS, EKS, or EC2, the integration means vulnerability data can flow natively into existing AWS security dashboards. The move arrives alongside fresh reminders of cloud risk: a critical Keycloak password-reset flaw (CVE-2026-18963) and a report exposing thousands of still-active leaked AWS keys. This article breaks down what changed, who is affected, and the practical steps to harden container pipelines. Why Base Image Bloat Creates Alert Fatigue Traditional container base images, whet...