async fn probe_inner( image: &str, policy: Policy, registry_base: Option<&str>, ) -> ContainerImageAccess