Your team utilizes Docker images for application development. There's a critical need to identify and mitigate vulnerabilities in these images before they're deployed, using Cloud Build. As the responsible engineer, what are TWO effective strategies to implement vulnerability detection in this workflow?