instruction: Create a Dockerfile for fundamentals
output: ```dockerfile
  from Docker Hub, the Docker Scout Dashboard, and CLI.
  Find out how in the overview guide.Sign in to your Docker account with the docker login command or use the
  Sign in button in Docker Desktop.Next, enroll your organization with Docker Scout, using the docker scout enroll command.
  
  $ docker scout enroll <ORG_NAME>
  Enable Docker Scout for your image repository with the docker scout repo enable command.
  
  $ docker scout repo enable --org <ORG_NAME> <ORG_NAME>/scout-demo
  Step 3: Analyze image vulnerabilitiesAfter building, use the docker scout CLI command to see vulnerabilities
  detected by Docker Scout.The example application for this guide uses a vulnerable version of Express.
  The following command shows all CVEs affecting Express in the image you just
  built:
  
  $ docker scout cves --only-package express
  Docker Scout analyzes the image you built most recently by default,
  so there's no need to specify the name of the image in this case.Learn more about the docker scout cves command in the
  CLI reference documentation.Step 4: Fix application vulnerabilitiesAfter the Docker Scout analysis, a high vulnerability CVE-2022-24999 was found, caused by an outdated version of the express package.The version 4.17.3 of the express package fixes the vulnerability. Therefore, update the package.json file to the new version:
  
   "dependencies": {
  - "express": "4.17.1"
  + "express": "4.17.3"
   }
  Rebuild the image with a new tag and push it to your Docker Hub repository:
  
  $ docker build --push -t <ORG_NAME>/scout-demo:v2 .
  Run the docker scout command again and verify that HIGH CVE-2022-24999 is no longer present:
  
  $ docker scout cves --only-package express
   â Provenance obtained
  ```