A technique includes accessing, by a computer, a container image that is built at least in part inside a virtual machine instance; and accessing, by the computer, an image of the virtual machine instance. Pursuant to the technique, the container image and the image of the virtual machine instance are scanned for security issues; and a result of the scanning is displayed by the computer.