Revert "Fix pipeline scan job"

[JunAr7112]

Reverts #2873

[coveralls]

coverage: 44.49%. remained the same — revert-2873-fix_scan into main

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: NVIDIA/gpu-operator/.coderabbit.yaml

Review profile: QUIET

Plan: Enterprise

Run ID: 06cdd0d7-b8db-4c5b-a7fe-20663e7502ea

📥 Commits

Reviewing files that changed from the base of the PR and between 9e18d68 and 5d36f77.

📒 Files selected for processing (1)

• .nvidia-ci.yml

Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

📝 Walkthrough

Walkthrough

The .scan job now authenticates with Docker, pulls the ${PLATFORM} image, and saves it as ${IMAGE_ARCHIVE}. pulse-cli scan scans the saved archive with the SSA token and container policy. Artifact collection now names the log, license, SBOM, vulnerability, and policy-evaluation files directly.

Priority: ⬇️ Low

Merge Risk: ⚪ Minimal · up to 5d36f

The workflow now archives and scans the platform image with matching artifact declarations; no merge-blocking risk is established.

---

_{Comment @coderabbitai help to get the list of available commands.}