I would like to see if anyone has a way to be able to read off of a component's repository's Dockerfile so that we are able to make scorecards out of it? I want to make a goal of making sure a package in Docker is kept up to date, similar to how NPM is getting tracked. Thanks in advance!
