How to mitigate this? Like replicate the images with Jfrog or other similar solutions to keep at least a copy and scan it for vulnerabilities and compromises. And any image pull in prod clusters should have this as the registry?