Then you also have to auto-update the containers, if it's a public facing service. Either you'll have to build containers yourself or hope the developer pushes a new update whenever the base image has relevant security fixes.
My own service images already have a script that runs daily that pulls latest git updates and builds fresh images.