Understanding Snyk Container CLI results