Use a feature flag to toggle security notifications

util/secscan/analyzer.py

@@ -1,6 +1,8 @@
 import logging
 import logging.config
 
+import features
+
 from collections import defaultdict
 
 from endpoints.notificationhelper import spawn_notification
@@ -90,7 +92,7 @@ class LayerAnalyzer(object):
 
     # If we are the one who've done the job successfully first, get the vulnerabilities and
     # send notifications to the repos that have a tag on that layer.
-    if set_status:
+    if features.SECURITY_NOTIFICATIONS and set_status:
       # Get the tags of the layer we analyzed.
       repository_map = defaultdict(list)
       event = ExternalNotificationEvent.get(name='vulnerability_found')