Enable Snyk scanning for built contianers

[bmbouter]

Synk can scan containers. If we enabled it, we could produce more secure containers. Let's enable it.

[git-hyagi]

done!

[bmbouter]

@git-hyagi what's the right place to see those reports? I suspect we need to have additional project team members added to the HMS org where the scans are done. What would you recommend?

[git-hyagi]

I don't know if there is a better way to see the reports, but while I was working on this issue I was checking them through snyk web UI HMS -> Projects:

For the project team members, I think we could at least add Gerrod and Matthias, since they are currently the "core maintainers" of the repo. However, I have no problem with adding everyone from the team as well.

[bmbouter]

Today at the pulpcore meeting we determined we're going to create an "upstream Snyk Org" and use that for the pulp-oci-images scanning. Keep this open, and that's the next step.