You want to scan a container image for vulnerabilities before deploying it. Which command uses the Trivy tool to scan an image?