italics->cta

DFE-Digital · Nov 27, 2024 · e66f7c5 · e66f7c5
1 parent b7e966b
commit e66f7c5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/docs/policies/vulnerability_management_policy.md b/docs/policies/vulnerability_management_policy.md
@@ -95,7 +95,8 @@ Your vulnerability management process for container images:
 #### Upstream base image vulnerabilities
 It is a known issue that some common base images have vulnerabilities that can only be fixed by the upstream maintainers. 
 
-It is *not* considered an appropriate exception to not patch vulnerabilities in container images because of upstream problems. 
+??? warning "It is not considered an appropriate exception to not patch vulnerabilities in container images because of upstream problems."
+    Please work with CISD and your architects to ensure secure base images are used, either by finding appropriate secure base images, by building your own images or other means such as muiti-stage docker builds
 
 To ensure that vulnerabilities in container images are patched within appropriate timescales teams must either: