US Patent 11042366 Managing software programs

Managing container applications by providing a registry of managed container base images, each managed container base image wrapped to include an injection point, determining that a managed container base image includes a vulnerability, and creating a patch script to address the vulnerability. Managing container applications further includes inserting the patch script at the injection point and issuing a pull command for an application using the managed container base image, to a container orchestration tool.