[CentOS] Package security scanner for CentOS docker containers

Hi List,

I’m looking for a command line package security scanner for CentOS docker
containers.

Is there any utility out there for checking alpine packages in an alpine
docker container against the cve database?

Tools similar to debsecan would be ideal (https://github.com/allthings/
debsecan), i.e a tool that can be launched from the host machine, will
connect to a container on the host, or start up a docker image on the
hosts, scan the packages and report CVEs relevant to each package.

Thanks in advance,
Traiano