Understanding container CLI scan results