Implement Synchronous Scan for Built Images in CI Pipeline

[leiicamundi]

Description:

Problem:
Currently, our CI pipeline does not perform synchronous vulnerability scans on built images. This means that changes can be integrated without prior verification of the packages present in these images, potentially introducing vulnerabilities into our system.

Proposal:
It would be beneficial to add a synchronous scan for built images in our CI pipeline. This would ensure that before integrating changes, we verify that the packages present in the images are healthy and do not contain fixable or critical vulnerabilities.

Discussion:
This topic will likely require discussion the InfoSec team and their best practices.

Related Branch:
The feature/snyk-integ branch proposes an initial draft for this implementation.