Add container scanning include rules

.gitlab-ci.yml

@@ -22,6 +22,13 @@ include:
       analyzer_image: "$CI_TEMPLATE_REGISTRY_HOST/security-products/container-scanning:6"
       # FIXME: why do I have to set this, this is weird ...
       force_run: true
+    rules:
+      - changes:
+          - Dockerfile
+          - .gitlab-ci.yml
+          - src/gitlab-tofu.sh
+      - if: $CI_COMMIT_TAG
+      - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
 
 stages:
   - build