add trivy scanner github action to report vulnarabiliites.

[humblec]

This adds a trivy scanner test to report vulnerabilities.

Signed-off-by: Humble Chirammal [email protected]

[humblec]

Thanks @guits ! looks like now we have the vulnarabilities reported on the base image here https://github.com/ceph/ceph-container/actions/runs/3470012183/jobs/5797688534

[mohag]

I don't think the Trivy check failing the pipelines will work - Trivy currently checks for RHEL vulnerabilities and still find some issues even with the latest CentOS Stream images currently. (possibly divergence of versioning?) (It might be useful to have it show up as warnings instead though)

[github-actions[bot]]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed in two weeks if no further activity occurs. Thank you for your contributions.

[github-actions[bot]]

This pull request has been automatically closed due to inactivity. Please re-open if these changes are still required.