The script is really needed only in determine-image-tag task because dockerfiles should just use tag provided from the outside.
(see https://github.com/stackrox/scanner/pull/1742#discussion_r1893569256)

Therefore, no need to store fail-build-if-git-is-dirty.sh in three repos. Just add it to the task.