dependabot(github-actions): bump docker/build-push-action from 4 to 5 #105

	name: Trivy Scan Code

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.

	on:
	push:

	jobs:

	trivy-code-scan:
	runs-on: ubuntu-latest
	permissions:
	security-events: write

	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/trivy-action@master
	with:
	scan-type: 'fs'
	format: 'table'
	ignore-unfixed: 'false'
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH'

Provide feedback