feat: added image scanning docs

[tomhobson]

Description

This is a draft for the basic of image scanning.

I found this pending, but haven't had time to pick it up to complete it yet.

It would also be nice to include some of the tekton chains bits as well as the extra learnings that we have from trivy now.

Fixes # (issue)

Checklist:

• [ ] I have mentioned the appropriate type(scope), as referenced here in the commit message and PR title for the semantic checks to pass.
• [ ] I have signed off the commit, as per instructions mentioned here.
• [ x] Any dependent changes have already been merged.

[tomhobson]

/hold

not ready yet, should have opened as a draft

[sonarqubecloud[bot]]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

[jenkins-x-bot]

@tomhobson: The following tests failed, say /retest to rerun them all:

Test name	Commit	Details	Rerun command
pr	705bb72c4a68b247a65fd5a8679c1656254fa4bb	link	/test pr
preview	705bb72c4a68b247a65fd5a8679c1656254fa4bb	link	/test preview

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the jenkins-x/lighthouse repository. I understand the commands that are listed here.

[jenkins-x-bot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: To complete the pull request process, please assign tomhobson You can assign the PR to them by writing /assign @tomhobson in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment Approvers can cancel approval by writing /approve cancel in a comment