There are many opensource and proprietary container image scanning tools. These container scanning tools first performs a binary scan on each layer of the image. In this step, these scanning tools identify the software components in each layer and indexes the SHA of each component.