Optimizing operating system vulnerability analysis

摘要

Embodiments relate to an intelligent computer platform to for optimizing operating system vulnerability analysis. A build manifest is parsed and actions associated with operating system packages that contribute to an image build are identified. The identified actions are executed and a minimum build image is created. The minimum image build is scanned and evaluated to identify one or more vulnerabilities present in the minimum image build. Remedial measures are identified and applied to the identified vulnerabilities. The build manifest is executed with the applied remedial measures.