Current model only filters out the OCI indexes and manifest lists from scanning. It does not filter out artifacts, which Clair also can't pick up and scan. For these images, Clair will continuously return a 500 which causes needless egress/ingress traffic. Scanning should only be done for container images.