I've implemented a custom Bazel test rule. The test executable pulls a Docker image from a local r