Automated test to know when the vulnerabilities DB is not up-to-date

Why are we doing this work

Create an automated test that checks the latest production image and if the DB is older than few days(maybe 2), we get an alert so that we know when the vulnerabilities DB are not up-to-date.

Relevant links

Non-functional requirements

• [-] Documentation:
• [-] Feature flag:
• [-] Performance:
• Testing:

Implementation plan

• backend Create a rake task (or maybe a script) in gcs that checks the latest production image and the vulnerabilities DB of trivy and send a slack alert to #s_protect-alerts similar to s_secure-alerts. https://gitlab.com/gitlab-org/quality/ci/secure-test-project-orchestrator could be used as a reference to send slack alerts. The rake task must be called from a scheduled pipeline.