ES: Run a component governance task in the CI pipeline.

[EHO-makai]

Proposal: Run a component governance task in the CI pipeline.

Summary

The release pipeline runs a 'component governance' task to ensure that the signing process involves only approved types of files.
The proposal is to run the same governance task in the "continuous integration" pipeline, to catch errors earlier during the development process.

Rationale

Catch component governance errors earlier in the development process.

Open Questions

Do any other similar CI/release pipelines run component governance checks in their CI phase or only in their release phase?