This container can be pulled via: docker pull registry.opensuse.org/systemsmanagement/scc/helm-charts/charts/trivy-runner:0.1.2 Set DOCKER_CONTENT_TRUST=1 to enable image tag verification.