It is difficult not just to know what a VM or container was built with, but what has been added or removed or changed and by whom. Grafeas, originally …