Azure ACR and AKS: contain a vulnerable image digest before redeployment
A production runbook for mapping an ACR vulnerability signal to AKS pods, freezing promotion, returning to a known digest, validating the rollout, then retaining or deleting the suspect image.
Read article