chore(deps): bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 (#11)

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.19.0 to 0.20.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@0.19.0...0.20.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

action.yaml

@@ -44,15 +44,15 @@ runs:
         password: ${{ inputs.token }}
 
     - name: Run Trivy vulnerability scanner
-      uses: aquasecurity/trivy-action@0.19.0
+      uses: aquasecurity/trivy-action@0.20.0
       with:
         image-ref: ${{ inputs.image-ref }}
         format: "json"
         output: "results.json"
         github-pat: ${{ inputs.token }}
 
     - name: Convert results to sarif
-      uses: aquasecurity/trivy-action@0.19.0
+      uses: aquasecurity/trivy-action@0.20.0
       with:
         image-ref: results.json
         scan-type: "convert"
@@ -73,7 +73,7 @@ runs:
 
     - name: Convert trivy results to cosign-vuln
       if: ${{ inputs.attest && !inputs.digest }}
-      uses: aquasecurity/trivy-action@0.19.0
+      uses: aquasecurity/trivy-action@0.20.0
       with:
         image-ref: results.json
         scan-type: "convert"
@@ -95,7 +95,7 @@ runs:
 
     - name: Convert trivy results to cyclonedx
       if: ${{ inputs.attest && inputs.digest }}
-      uses: aquasecurity/trivy-action@0.19.0
+      uses: aquasecurity/trivy-action@0.20.0
       with:
         image-ref: results.json
         scan-type: "convert"