Even on Quay the centos7 tag hasn't been updated in 2 years so it's clearly not getting any of the package updates. Yay, security!