Ensure the image scanned is the one that was pushed from previous stage

Note this change is on top of !303 (merged) which is expected to be merged first. See description of the problem in !286 (comment 513309016):

It seemed like the container scanning jobs were not necessarily targeting the image built from the test job since they all run in parallel?

/cc @ash2k