SAST analyzers, for the most part, are built and shipped on top of [Alpine](https://alpinelinux.org/)-based images. However, there are also a couple analyzers which are shipped on top of [Debian](https://www.debian.org/)-based images due to tooling constraints. While these images work well in commercial environments where cost of ownership is a large concern, it can result in slower adoption in environments where strict controls over package managers and linux distributions exist.