Given an application image that has no allowlist defined, how do you identify the parent image allowlist to apply?