Docker

Docker's own image analysis service, which builds an SBOM from image layers, matches it against advisory sources, and recommends base image changes that remove the most findings.