Merge pull request #1711 from kubernetes-sigs/dependabot/go_modules/a… #2634

	name: Trivy vulnerability scanner
	on:
	push:
	branches:
	- master
	pull_request:
	jobs:
	build:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- name: Set up Go 1.x
	uses: actions/setup-go@v5
	with:
	go-version: 1.23.1
	id: go

	- name: Checkout code
	uses: actions/checkout@v4

	- name: Build an image from Dockerfile
	run: \|
	export PUBLISH=true
	export REGISTRY=test
	export IMAGE_VERSION=latest
	export DOCKER_CLI_EXPERIMENTAL=enabled
	make container

	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/trivy-action@master
	env:
	TRIVY_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-db:2"
	with:
	image-ref: 'test/blob-csi:latest'
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH,MEDIUM,UNKNOWN'

Provide feedback