Shift security left with on-demand vulnerability scanning