ci(gha): add TRIVY_SKIP_VERSION_CHECK to trivy container image scan job

Author: abhisheksr01

.github/workflows/pipeline.yml

@@ -226,7 +226,19 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           cache-to: type=registry,ref=${{ env.BASE_IMAGE }}:cache
           cache-from: type=registry,ref=${{ env.BASE_IMAGE }}:cache,mode=max
+      - name: Validate Container Image
+        if: ${{ steps.bump-version.outputs.is-dryrun-version-bumped == 'true' }}
+        run: |
+          docker run -d -p 8080:8080 ${{ env.BASE_IMAGE }}:${{ steps.bump-version.outputs.bump-version }}
+          sleep 5  # Wait for container to start
+          HEALTH_STATUS=$(curl -s http://localhost:8080/companieshouse/actuator/health | jq -r '.status')
+          if [ "$HEALTH_STATUS" != "UP" ]; then
+            echo "Health check failed. Status: $HEALTH_STATUS"
+            exit 1
+          fi
+          echo "Health check passed. Status: $HEALTH_STATUS"
       - name: Scan Image
+        if: ${{ steps.bump-version.outputs.is-dryrun-version-bumped == 'true' }}
         uses: aquasecurity/[email protected]
         with:
           versin: 0.66.0
@@ -236,17 +248,10 @@ jobs:
           ignore-unfixed: true
           vuln-type: 'os,library'
           scanners: 'vuln,secret,misconfig'
-      - name: Validate Container Image
-        run: |
-          docker run -d -p 8080:8080 ${{ steps.meta.outputs.tags }}
-          sleep 5  # Wait for container to start
-          HEALTH_STATUS=$(curl -s http://localhost:8080/companieshouse/actuator/health | jq -r '.status')
-          if [ "$HEALTH_STATUS" != "UP" ]; then
-            echo "Health check failed. Status: $HEALTH_STATUS"
-            exit 1
-          fi
-          echo "Health check passed. Status: $HEALTH_STATUS"
+        env:
+          TRIVY_SKIP_VERSION_CHECK: true
       - name: Re-Build & Push Image
+        if: ${{ steps.bump-version.outputs.is-dryrun-version-bumped == 'true' }}
         uses: docker/build-push-action@v6
         with:
           push: true