Makes sense to me -- If you had a perfect artifact inventory/tracking system, then you could query it. But instead, we have osquery. So can you leverage osquery to query the running container OS for it's package versions. (Though my own container bias is to use things with less OS, pushing this back some kind of artifact inventory)