The evolution of container technology has seen significant progress, starting from the introduction of the Unix U7 container concept in 1979 to the popularization of the Docker container concept in 2013. In recent years we have seen docker containers being provisioned as servers or virtual machine hosts on cloud services. Several cloud providers have adopted and support docker containers to be built and deployed on their platforms. It is important to proactively detect and patch vulnerable docker containers before they are deployed into production environments or hosted as VM servers. This paper aims to evaluate and develop a methodology that is useful in vulnerability scanning and automating a workflow process that halts deploying identified vulnerable docker container images for further security risk analysis, patching, and eventually deploying into production environments. The patch management process is also automated to fetch possible fixes from the CVE databases. The outcome of this research paper highlights the purpose and significance of our automation script in continuous integration and continuous deployment (CI/CD) pipeline workflow for the timely discovery of easy-to-exploit vulnerabilities in container images, and a proactive approach to halt deploying affected container images to production environments for further security health check and remediation to reduce the risk of attack surfaces that can be exploited leading to major security incidents.