Not all developers should be aware of / annoyed by CVE scans. That is the responsability of security experts (#security). The goal of this ticket is to add a cron job that runs the CVE scan and posts it to Slack. This would mean we can take it out from Jenkins pipelines.