Arch Linux

We don't have such a recommendation mechanism in Arch Linux. We only have optional dependencies.
We could add a package named docker-scan-plugin (or better docker-plugin-scan) to the optdepends but there is no such package in the Arch Linux repositories.
So, until someone is interested in maintaining the scan plugin in the official repositories, I'll not add it.

While I do fully understand and follow the reasoning, I wanted to ask whether anything was happening in this regard in the mean time?

I can't even find anything on the AUR.

The github README ( https://github.com/docker/scan-cli-plugin ) of the docker scan plugin explicitly states:
"
On Linux

Docker packaging on Linux comes with Docker scan plugin. You can simply install Docker following the standard linux install
Just try to use the plugin, open a terminal and type the following command:
$ docker scan
Usage: docker scan [OPTIONS] IMAGE

If you get the following error message, you're not using the latest version of Docker on Linux docker: 'scan' is not a docker command."
"

That leads me to the conclusion that imho docker scan should be included in the main docker package.
At first I was thinking my docker installation or the Arch Linux package must be out of date, before even getting the idea to look up this ticket/task/bug report/feature request.

Partially forgotten, but I assume it has renewed interest because of log4j :)

I'll package it as `docker-scan` as it would follow the convention from `docker-compose`.