Run trivy scan of repo branch on PR and push to dev / master

[i-oden]

1. This PR contains the following changes...

Add workflow file to scan local repo branch instead of the remote image on GHCR.

2. The following additional changes are required for this to work

X

3. The PR fixes the following GitHub issue / Jira task

• GitHub issue (link):
• Jira task (ID, DDS-xxxx):
• The PR does not fix a specific GitHub issue or Jira task

4. What type of change(s) does the PR contain?

• New feature
  • Breaking: Please describe the reason for the break and how we can fix it.
  • Non-breaking
• Database change
  • Migration included in PR
  • Migration not needed
• Bug fix
  • Breaking: Please describe the reason for the break and how we can fix it.
  • Non-breaking
• Security Alert fix
• Documentation
• Tests (only)
• Workflow

5. Checklist

Always

• Changelog
  • Added
  • Not needed (E.g. PR contains only tests)
• Rebase / Update / Merge from base branch (the branch from which the current is forked)
  • Done
  • Not needed
• Blocking PRs
  • Merged
  • No blocking PRs
• PR to master branch
  • Yes: Go to the section PR to master
  • No

If PR consists of code change(s)

• Self review
  • Done
• Comments, docstrings, etc
  • Added / Updated
• Documentation
  • Updated
  • Update not needed

6. Actions / Scans

• Black: Python code formatter. Does not execute. Only tests.
  Run black . locally to execute formatting.
  • Passed
• Prettier: General code formatter. Our use case: MD and yaml mainly.
  Run npx prettier --write . locally to execute formatting.
  • Passed
• Tests: Pytest to verify that functionality works as expected.
  • New tests added
  • No new tests
  • Passed
• CodeQL: Scan for security vulnerabilities, bugs, errors
  • New alerts: Go through them and either fix, dismiss och ignore. Add reasoning in items below.
  • Alerts fixed: What?
  • Alerts ignored / dismissed: Why?
  • Passed
• Trivy: Security scanner
  • New alerts: Go through them and either fix, dismiss och ignore. Add reasoning in items below.
  • Alerts fixed: What?
  • Alerts ignored / dismissed: This PR is adding the scan, other ongoing PRs are fixing the CVEs.
  • Passed
• Snyk: Security scanner
  • New alerts: Go through them and either fix, dismiss och ignore. Add reasoning in items below.
  • Alerts fixed: What?
  • Alerts ignored / dismissed: Why?
  • Passed

[codecov]

Codecov Report

Merging #1377 (6253ec5) into dev (c32d147) will not change coverage.
The diff coverage is n/a.

❗ Current head 6253ec5 differs from pull request most recent head cfda08b. Consider uploading reports for the commit cfda08b to get more accurate results

@@           Coverage Diff           @@
##              dev    #1377   +/-   ##
=======================================
  Coverage   87.94%   87.94%           
=======================================
  Files          29       29           
  Lines        4147     4147           
=======================================
  Hits         3647     3647           
  Misses        500      500           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.