feat: trivy and ort implementation

[sehaartuc]

Summary by Sourcery

This pull request adds a new GitHub Actions workflow to automate weekly vulnerability scans on the latest two semantically versioned Docker images using Trivy and ORT. The workflow is scheduled to run every Monday and includes steps for setting up Docker, logging into the GitHub Container Registry, fetching the latest image tags, and performing vulnerability scans.

• New Features:
  • Introduced a new GitHub Actions workflow to perform weekly vulnerability scans on the latest two semantically versioned Docker images using Trivy and ORT.
• CI:
  • Added a scheduled GitHub Actions workflow that runs every Monday at 14:00 UTC to fetch and scan Docker images for vulnerabilities.

[sourcery-ai]

Reviewer's Guide by Sourcery

This pull request introduces a new GitHub Actions workflow to perform weekly vulnerability scans on the latest two semantically versioned Docker images using Trivy and OSS Review Toolkit (ORT). The workflow is scheduled to run every Monday at 14:00 UTC and can also be triggered manually. The implementation includes steps to set up Docker, authenticate with GitHub Container Registry, fetch the latest two image tags, scan the images with Trivy, and perform an ORT analysis.

File-Level Changes

Files	Changes
.github/workflows/weekly_vuln_scan.yml	Introduced a new GitHub Actions workflow to automate weekly vulnerability scans and ORT analysis for the latest two semantically versioned Docker images.

---

Tips

• Trigger a new Sourcery review by commenting @sourcery-ai review on the pull request.
• Continue your discussion with Sourcery by replying directly to review comments.
• You can change your review settings at any time by accessing your dashboard:
  • Enable or disable the Sourcery-generated pull request summary or reviewer's guide;
  • Change the review language;
• You can always contact us if you have any questions or feedback.

[sourcery-ai]

Hey @sehaartuc - I've reviewed your changes and they look great!

Here's what I looked at during the review

• 🟡 General issues: 3 issues found
• 🟡 Security: 1 issue found
• 🟢 Testing: all looks good
• 🟢 Complexity: all looks good
• 🟢 Documentation: all looks good

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment to tell me if it was helpful.}