Static vulnerability scanning in Docker Hub