expect(report).to match_schema(:container_scanning) already verifies the presence of required properties. Checking them again is redundant.
expect(report).to match_schema(:container_scanning)