Feat/1054 feature testing trivy

.github/workflows/trivy.yml

@@ -0,0 +1,13 @@
+name: Trivy security scan
+on:
+  pull_request:
+  schedule:
+    - cron: '0 3 * * *' # läuft täglich um 03:00 UTC
+jobs:
+  scan:
+    name: Security Check
+    runs-on: ubuntu-latest
+    if: github.event_name != 'schedule' || github.ref == 'refs/heads/main'
+    steps:
+      - name: Run Trivy Security check on Repository
+        uses: it-at-m/lhm_actions/action-templates/actions/action-trivy@93bc0588b20f51660a827470790f6e52b7e300e6

refarch-backend/pom.xml

@@ -253,6 +253,18 @@
             <version>${commons-io.version}</version>
         </dependency>
 
+        <!-- Dependencies for CVE fixes -->
+        <dependency> <!-- Added to fix CVE-2025-48924-->
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-lang3</artifactId>
+            <version>3.18.0</version>
+        </dependency>
+        <dependency> <!-- Added to fix CVE-2026-29062-->
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-core</artifactId>
+            <version>2.21.1</version>
+        </dependency>
+
         <!-- Configuration Processor -->
         <dependency>
             <groupId>org.springframework.boot</groupId>

refarch-eai/pom.xml

@@ -150,6 +150,13 @@
             <version>${spotbugs-annotations.version}</version>
         </dependency>
 
+        <!-- Dependencies for CVE fixes -->
+        <dependency> <!-- Added to fix CVE-2026-29062-->
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-core</artifactId>
+            <version>2.21.1</version>
+        </dependency>
+
         <!-- Configuration Processor -->
         <dependency>
             <groupId>org.springframework.boot</groupId>