Have finally accepted that due to my homelab's reliance on containers, I'm going to have to set up a full inner sourcing/AppSec pipeline. Otherwise I'll get pwned every which way