container image risk assessment