Update dependency scanning QA template for new CI/CD component

Why are we doing this work

In Create Dependency Scanning CI/CD Component (#433267 - closed) • Oscar Tovar • 17.5 • At risk, we created a CI/CD component for the new dependency scanning analyzer that was developed as part of Full dependency graph support in new component ... (&7288 - closed) • Igor Frenkel. It would be good to trigger scans for our test projects on analyzer release or component update, and ensure the following:

  • job(s) pass successfully
  • artifacts are generated correctly

The current QA script lives in the ci-templates project. Since we'll maintaining Gemnasium with critical updates for some time, it may be necessary to add a separate script that tests the new component + analyzer.

Implementation plan

Plan 1

  • Use the existing qa testing to add support for remaining package managers

Plan 2

  • Dynamically include the dependency scanning component when running qa
  • Use the analyzer release to get list of package managers to be tested
  • Create one test run per package manager

Verification steps

/cc @willmeek

Edited by Igor Frenkel