Separate workflows for dev and master trivy scans

[i-oden]

1. This PR contains the following changes...

The scans are currently confusing and the dev branch is scanning the master image. This duplicates a lot of the code but it clarifies. Master branch should now scan release, and dev should be scanning dev image.

2. The following additional changes are required for this to work

X

3. The PR fixes the following GitHub issue / Jira task

• GitHub issue (link):
• Jira task (ID, DDS-xxxx):
• The PR does not fix a specific GitHub issue or Jira task

4. What type of change(s) does the PR contain?

• New feature
  • Breaking: Please describe the reason for the break and how we can fix it.
  • Non-breaking
• Database change
  • Migration included in PR
  • Migration not needed
• Bug fix
  • Breaking: Please describe the reason for the break and how we can fix it.
  • Non-breaking
• Security Alert fix
• Documentation
• Tests (only)
• Workflow

5. Checklist

Always

• Changelog
  • Added
  • Not needed (E.g. PR contains only tests)
• Rebase / Update / Merge from base branch (the branch from which the current is forked)
  • Done
  • Not needed
• Blocking PRs
  • Merged
  • No blocking PRs
• PR to master branch
  • Yes: Go to the section PR to master
  • No

If PR consists of code change(s)

• Self review
  • Done
• Comments, docstrings, etc
  • Added / Updated
• Documentation
  • Updated
  • Update not needed

6. Actions / Scans

• Black: Python code formatter. Does not execute. Only tests.
  Run black . locally to execute formatting.
  • Passed
• Prettier: General code formatter. Our use case: MD and yaml mainly.
  Run npx prettier --write . locally to execute formatting.
  • Passed
• Yamllint: Linting of yaml files.
  • Passed
• Tests: Pytest to verify that functionality works as expected.
  • New tests added
  • No new tests
  • Passed
• CodeQL: Scan for security vulnerabilities, bugs, errors
  • New alerts: Go through them and either fix, dismiss och ignore. Add reasoning in items below.
  • Alerts fixed: What?
  • Alerts ignored / dismissed: Why?
  • Passed
• Trivy: Security scanner
  • New alerts: Go through them and either fix, dismiss och ignore. Add reasoning in items below.
  • Alerts fixed: What?
  • Alerts ignored / dismissed: Why?
  • Passed
• Snyk: Security scanner
  • New alerts: Go through them and either fix, dismiss och ignore. Add reasoning in items below.
  • Alerts fixed: What?
  • Alerts ignored / dismissed: Why?
  • Passed