Using a single base image to enable security scanning

Hi,

AWS ECR image scanning (based on CoreOS clair) fails for the current version of the docker file.
I believe it's because of the two `FROM` statements:
```
FROM debian:7.11-slim
```
and 
```
FROM scratch
```
Is it possible to simplify these? as in, potentially only use one FROM statement...
to enable image vulnerabilities scanning...

Thanks,