Feat: Investigate the possibility of integrating Dockfile scanning tool

Refer to this tech article sharing, some tools has ability to scan Dockfile and find the potential illegal issues, and some customers hope this could happen in ks.

https://mp.weixin.qq.com/s/z9ybN3iS3jD6tikjLoG_2Q

No files, tests, or entry points are named. Start by reviewing the linked article and the repository's existing DevOps integrations to determine whether Dockerfile scanning is in scope and what tool or findings are required. Done should be a documented integration plan or an agreed implementation scope.

Written by the indexing model from the issue text.