container-scanning-with-allowlist