add trivy scanner github action to report vulnarabiliites. #12

	---
	name: Trivy vulnerability scanner
	# yamllint disable-line rule:truthy
	on:
	push:
	branches:
	- main
	pull_request:
	jobs:
	build:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v3
	- name: Install go
	uses: actions/[email protected]
	with:
	go-version: ^1.18

	- name: Build an image from Dockerfile
	run: \|
	make build BASEOS_REPO=centos BASEOS_REGISTRY=quay.io/centos BASEOS_TAG=stream8 FLAVORS="main,centos,8"

	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: 'ceph/daemon:HEAD-main-centos-stream8-x86_64'
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'
	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: 'ceph/daemon-base:HEAD-main-centos-stream8-x86_64'
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'

Provide feedback