[Spike] Determine which Job Artifacts we will scan for secrets

Summary - Why is this spike needed?

We are working on technical discovery efforts to determine how we can expand Secret Detection to Job Artifacts. As a part of this effort, we need to determine what qualifies as a Job Artifact, what their formats are, and decide which ones we'll support in each shippable iteration of this feature (Experiment, Beta, GA).

Requirements

  • Define what a job artifact is and what we should expect at the completion of a job
  • Put together a list of all arbitrary files that can be included in a job artifact, including types of formats for each.
  • Determine the effort/complexity required to expand scanning to each artifact format
  • Work with EM/PM to prioritize which artifact types will be included in each shippable iteration

Timebox Expectations

TBD

Expected Outcomes

  • Job Artifacts definition and list are added to the parent issue/epic.
  • Each shippable iteration has a clear list of job artifacts we'll be expanding to
  • Determine how artifacts are bound (by file type, size, etc.) and the performance implications associated with them

Additional context

Edited by Amar Patel