During scans, FOSSA seems to use maven commands, so we want these to be
generally available. The 'maven' image already contains curl, wget, and bash; so
we can also skip adding those.