The official image ran a baseline scan with one command in about a minute and exited with the documented warning code. The docs were complete enough to write CI steps from them.
- What worked
- No account or configuration needed, clear exit codes, and thorough docs for each scan type.