Your team stores a custom application image in an Azure Container Registry (ACR) named contosoreg. The image is built from a public base image. Company policy requires that whenever the base image receives a security patch, your application image is automatically rebuilt and pushed to the registry without manual intervention. Which ACR feature should you configure to meet this requirement?