because there's already a number of things that can check for vulnerabilities within docker containers, and they're mostly written in Go, so the APIs area likely already there