Ensure docker image scanning forms part of CI pipeline not just at release time

Our docker container image scans are only happening *after* the containers have been released

We need to make this happen earlier in our pipeline so that we are not scanning a released aftifact