imagescan: Don't clobber before_script of parent job

Morten Knutsen requested to merge mk_move_trivyignore into master

When introducting the ability to create a .trivyignore we used before_script. However, this clobbers the parent before_script of the .docker job.

Fix by just putting it into the actual script section.

Merge request reports