There are two services you can use

Web Security Scanner - this will scan your application (hosted either on App Engine or Compute Engine) for vulnerablities - e.g. outdated libraries, hackable scripts etc.

Vulnerability Scanner - This is primarily to scan docker images and artifact registries.