Rules in container scanning

.gitlab-ci.yml

@@ -116,6 +116,14 @@ container_scanning:
     CS_SCHEMA_MODEL: 15
     # Used for remediation
     GIT_STRATEGY: fetch
+  # FIXME: because we are using rules with the include, but override here, we also have to have the same rules here
+  rules:
+    - changes:
+        - Dockerfile
+        - .gitlab-ci.yml
+        - src/gitlab-tofu.sh
+    - if: $CI_COMMIT_TAG
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
 
 gitlab-opentofu-image:deploy:with-opentofu-version:
   extends: .opentofu-versions