By running it in an ephemeral container with no network access for each file you want to check?