Add security scanning CI jobs for UB7 CNG images
Summary
Add security scanning CI jobs for UB7 CNG images and Debian images
Followup to #443 (closed)
Proposal
Once we have UB7 images working, we should start running security scanning on them. The purpose of using UB7 is to have hardened images. We should ensure we have test pipelines in place that help validate this hardening, by checking the containers for CVEs.
References
Edited by Larissa Lane