Push to gcp app collection (#355)

* Push to gcp app collection

* Ignore nancy vulnerabilities that can't be fixed right now

.circleci/config.yml

@@ -154,3 +154,16 @@ workflows:
               ignore: /.*/
             tags:
               only: /^v.*/
+
+      - architect/push-to-app-collection:
+          context: architect
+          name: push-to-gcp-app-collection
+          app_name: "etcd-backup-operator"
+          app_collection_repo: "gcp-app-collection"
+          requires:
+            - push-etcd-backup-operator-to-control-plane-app-catalog
+          filters:
+            branches:
+              ignore: /.*/
+            tags:
+              only: /^v.*/

.nancy-ignore

@@ -2,7 +2,10 @@
 CVE-2022-29153 until=2023-02-01
 CVE-2022-24687 until=2023-02-01
 CVE-2021-23772 until=2023-02-01
-CVE-2021-41803 until=2023-02-01
-sonatype-2022-0204 until=2023-02-01
 sonatype-2021-1485 until=2023-02-01
 sonatype-2021-0276 until=2023-02-01
+
+# Hashicorp consul /api and /sdk are no longer intended for public use and don't have newer tags.
+# Waiting for direct dependencies to move away from them.
+CVE-2021-41803 until=2022-12-03
+sonatype-2022-0204 until=2023-02-01