The container image to scan, given as a full reference (repository:tag), for example myrepo/app:1.2.3. The image must be available to the Docker daemon on the build agent. Environment variables are expanded, so values like myrepo/app:${BUILD_NUMBER} are supported.