We're currently getting scanned after the fact, but it would be nice to know in advance whether we are creating new weaknesses/vulnerabilities. We should probably add a security test to our repos just so we can see if there are any issues with PRs "on the way in"

https://docs.ci.openshift.org/docs/how-tos/add-security-scanning/