Thanks, that's a really useful tool and a good write-up on the utility of it.

In the short term I can probably convince the higher-ups that if I download the images manually and do some level of investigation using a tool like yours then it should account for some security.

Have you considered container scanning tools?