Bump the github-dependencies group across 1 directory with 13 updates #1063

	---
	name: Trivy vulnerability scanner
	on:
	push:
	branches:
	- master
	pull_request:
	jobs:
	build:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Install go
	uses: actions/setup-go@v5
	with:
	go-version: 1.23.1

	- name: Build images from Dockerfile
	run: \|
	make
	docker build -t test/csi-snapshotter:latest -f ./cmd/csi-snapshotter/Dockerfile --output=type=docker --label revision=latest .
	docker build -t test/snapshot-controller:latest -f ./cmd/snapshot-controller/Dockerfile --output=type=docker --label revision=latest .

	- name: Run Trivy vulnerability scanner on csi-snapshotter image
	uses: aquasecurity/trivy-action@master
	env:
	TRIVY_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-db:2"
	with:
	image-ref: 'test/csi-snapshotter:latest'
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'

	- name: Run Trivy vulnerability scanner on snapshotter-controller image
	uses: aquasecurity/trivy-action@master
	env:
	TRIVY_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-db:2"
	with:
	image-ref: 'test/snapshot-controller:latest'
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'

Provide feedback