Building vulnerability scanning into CircleCI