Hi there, I'm from the Trivy team -- you can scan the misconfiguration of container images i.e. Dockerfile, with Trivy as well. However, without the source cod

Hi there, I'm from the Trivy team -- you can scan the misconfiguration of container images i.e. Dockerfile, with Trivy as well. However, without the source code being open source, you cannot really check what anyone is up to -- thus, don't just use any container image on DockerHub