During the quay midstream we want to bundle the two files that are needed for accurate Red Hat vulnerability results into the Clair downstream image. These files should be referenced with two environment variables that can be read from the container by the operator.

The two files are:
https://security.access.redhat.com/data/metrics/repository-to-cpe.json
https://security.access.redhat.com/data/metrics/container-name-repos-map.json

The two env vars could be something like:
RED_HAT_REPO_TO_CPE_FILE_PATH
RED_HAT_CONTAINER_TO_REPOS_FILE_PATH