We eliminated 1,400 CVEs in NanoClaw's container images

Echo partnered with NanoClaw to reduce vulnerabilities in its container images, eliminating approximately 1,400 CVEs through a three-step hardening process: safely upgrading libraries like Chromium, researching and patching major version jumps, and backporting security fixes from newer versions to maintain compatibility. The process involved scanning with multiple vulnerability scanners (Trivy, Grype, and Wiz) and contributing findings back to the open source community to improve advisory databases.