Docker enables developers to efficiently handle the packaging, storage, and deployment of applications, but as container technologies become more prevalent, the security of these images poses a significant challenge. Integrating security checks into an automated pipeline has become a best practice, and tools like Anchore facilitate this by providing static analysis and user-defined policy enforcement on container images. This integration is crucial within Continuous Integration (CI) environments, as container images remain immutable, necessitating new builds for any application changes. Anchore allows for deep insight and governance over container contents, and examples show how it can be seamlessly added to CircleCI workflows for both public and private image scans. The process not only ensures compliance with security policies but also prevents non-compliant images from progressing in the pipeline, thereby promoting secure and efficient deployment practices.