Fix: #37. Add ContainerImageAnalysis kb.

[ioggstream]

This PR

• adds ContainerImage Analysis

Fixes: #37

[netfl0]

In the kb-article it was noted to scan for weak configurations (we do have D3-ACH for fixing the problems discovered) and vulnerable libraries (D3-SU is the fix here). Those are distinct countermeasures we should probably break out. Given that applications are inside the containers and other package formats, we may need to break this out to make sure its obvious which one to select. We are working on vulnerability scanning / inventory, tagging @hack-sentinel since he is currently working in this space.

[ioggstream]

To address this, we should define whether ContainerImages fall under PlatformHardening or ApplicationHardening.

IMHO:

• if we deploy a containerized application, then the whole container is probably the deliverable, and the container image should be treated like software libraries;
• if we deploy a containerized system functionality, then D3-SU is probably corret.