The Inline Scanning mode will perform the scan within the runner in the same machine where the image was built, without the container image ever leaving the pipeline. This mode currently requires that Jenkins has access to the Docker socket.