Container scanning and upload to dependency track

using syft. related to #149 (closed)