There's a number of image scanners which (IME) can produce different results from each other, although it's not always as clearly right/wrong as you might expec

There's a number of image scanners which (IME) can produce different results from each other, although it's not always as clearly right/wrong as you might expect. Trivy (that this page is based on), Docker Scout, and Grype are three of the more common ones.