Building a docker image for security scan

[OrenGitHub]

Hi guys,
I'm trying to reproduce this cve, from a container scan perspective¹.
I'm a bit confused because I couldn't find any COPY . . ( or similar ) in the docker files.
So the compose worked fine ( see below ) but where is the actual source code ?

$ docker compose up -d
[+] Running 9/9
 ✔ Container farmbot-web-app-redis-1        Running                                                                                            0.0s
 ✔ Container farmbot-web-app-parcel-1       Started                                                                                            0.0s
 ✔ Container farmbot-web-app-db-1           Started                                                                                            0.0s
 ✔ Container farmbot-web-app-typescript-1   Started                                                                                            0.6s
 ✔ Container farmbot-web-app-web-1          Started                                                                                            0.7s
 ✔ Container farmbot-web-app-mqtt-1         Started                                                                                            0.9s
 ✔ Container farmbot-web-app-log_digests-1  Started                                                                                            0.4s
 ✔ Container farmbot-web-app-rabbit_jobs-1  Started                                                                                            0.6s
 ✔ Container farmbot-web-app-delayed_job-1  Started                                                                                            1.1s

---

¹ I am the author of this open source security container scanner