Testing Docker CVE Scanners. How good is package detection?
medium.com