SCAP profile version control - Research Spike

Currently, we are grabbing the SCAP profile each time the pipeline runs. When this profile is updated, we are caught off guard. We should look at a way to use version control for the profile, and check regularly for updates to it.

This is a research spike because we need to determine the following:

• how to retrieve, check the profile, and add it to the pipeline
• how to modify the pipeline to accommodate this change