To improve security we could integrate tools like https://github.com/aquasecurity/trivy-action for automatically scanning our docker images. More research is needed on this topic.