That Wednesday when our scanner flagged 42 containers in one build and I finally got the devs to care
I piped the Trivy results straight into the PR as a comment instead of a separate dashboard nobody opens at our Chicago office, and three devs fixed their own base images before lunch. What's your go-to trick for getting scan findings in front of people who don't live in the security tab?