exit if not on main

Author: sreya

.github/workflows/ci.yaml

@@ -189,9 +189,13 @@ jobs:
       - name: build image
         run: make -j build/image/envbox
 
+      # We don't want to run Trivy on pull requests.
+      - name: Exit if not on main
+        if: github.ref != 'refs/heads/main'
+        run: exit 0
+
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/[email protected]
-        if: github.ref == 'refs/heads/main'
         with:
           image-ref: envbox:latest
           format: sarif
@@ -200,14 +204,12 @@ jobs:
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v2
-        if: github.ref == 'refs/heads/main'
         with:
           sarif_file: trivy-results.sarif
           category: "Trivy"
 
       - name: Upload Trivy scan results as an artifact
         uses: actions/upload-artifact@v3
-        if: github.ref == 'refs/heads/main'
         with:
           name: trivy
           path: trivy-results.sarif