run oval vulnerability scan during docker build