Add 'apt-get upgrade' to the image builds to include security fixes with each build in case the used base image is not updated frequently.
In case the base image is updated frequently, the 'apt-get upgrade' is a no operation. If not it will catch the security updates available since the last update of the base image.