container compliance scanning