Building a docker image for security scan

Hi guys,
I'm trying to reproduce [this cve][1], from a *container* scan perspective¹.
I'm a bit confused because I couldn't find any `COPY . .` ( or similar ) in the docker files.
So the compose worked fine ( see below ) but where is the actual source code ?
```bash
$ docker compose up -d
[+] Running 9/9
✔ Container farmbot-web-app-redis-1 Running 0.0s
✔ Container farmbot-web-app-parcel-1 Started 0.0s
✔ Container farmbot-web-app-db-1 Started 0.0s
✔ Container farmbot-web-app-typescript-1 Started 0.6s
✔ Container farmbot-web-app-web-1 Started 0.7s
✔ Container farmbot-web-app-mqtt-1 Started 0.9s
✔ Container farmbot-web-app-log_digests-1 Started 0.4s
✔ Container farmbot-web-app-rabbit_jobs-1 Started 0.6s
✔ Container farmbot-web-app-delayed_job-1 Started 1.1s
```

---
¹ I am the author of [this open source security container scanner][2]

[1]: https://securitylab.github.com/advisories/GHSL-2023-200_FarmBot_Web_App/
[2]: https://github.com/OrenGitHub/dhscanner