Detecting security risks related to a software component

A computer system for detecting security risks related to a software component to be deployed in a container-based runtime environment, the computer system comprising a processor of a container vulnerability advisor (CVA) configured to execute instructions that, when executed on the processor, cause the CVA to:

• receive a trigger, the trigger indicating that a layer of the container is to be checked for security risks;
• identify a check layer of the container that is to be checked for security risks;
• determine when a check for security risks has been previously performed for the check layer according to a check criterion;
• when the determination is negative, then:
• perform a security analysis for the check layer;
• when the security analysis indicates a security risk, then initiate a remedial action;
• and
• when the security analysis indicates no security risk, then skip the initiation of the remedial action;
• and
• when the determination is positive, then skip the performance of the security analysis for the check layer.

A computer program product comprising a non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code configured to, when run on a processor of a container vulnerability advisor (CVA), to:

• receive a trigger, the trigger indicating that a layer of the container is to be checked for security risks;
• identify a check layer of the container that is to be checked for security risks;
• determine when a check for security risks has been previously performed for the check layer according to a check criterion;
• when the determination is negative, then:
• perform a security analysis for the check layer;
• when the security analysis indicates a security risk, then initiate a remedial action;
• and
• when the security analysis indicates no security risk, then skip the initiation of the remedial action;
• and
• when the determination is positive, then skip the performance of the security analysis for the check layer.