github-actions(deps): Bump ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-scan.yml from 5.5.0 to 6.3.0 (#89)

*  github-actions(deps): Bump ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-scan.yml

Bumps [ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-scan.yml](https://github.com/ministryofjustice/analytical-platform-github-actions) from 5.5.0 to 6.3.0.
- [Release notes](https://github.com/ministryofjustice/analytical-platform-github-actions/releases)
- [Commits](ministryofjustice/analytical-platform-github-actions@2ab1741...c1b4db7)

---
updated-dependencies:
- dependency-name: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-scan.yml
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update container-scan.yml

manually bump to v6.4.0

* Bump image

* Update comment

* Update .trivyignore

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: James Stott <158563996+jamesstottmoj@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/container-scan.yml

@@ -13,4 +13,4 @@ jobs:
     name: Container Scan
     permissions:
       contents: read
-    uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-scan.yml@2ab174150aeb0a6003afd1c0b4316698720b3b6b # v5.5.0
+    uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-scan.yml@9e604949e842733e0990f5eb6627844e8715deeb # v6.4.0

.trivyignore

@@ -8,3 +8,4 @@ CVE-2025-49794 exp:2026-03-17
 CVE-2025-49796 exp:2026-03-17
 CVE-2025-49795 exp:2026-03-17
 CVE-2025-6021 exp:2026-03-17
+CVE-2026-25646 exp:2026-03-20

Dockerfile

@@ -1,7 +1,7 @@
 #checkov:skip=CKV_DOCKER_3: Current implementation uses off-the-shelf image from OpenResty which doesn't offer a nonroot variant
 
-# docker.io/openresty/openresty:1.27.1.2-1-alpine-fat
-FROM docker.io/openresty/openresty:1.27.1.2-1-alpine-fat@sha256:a82c4d8bceb80cffd0bb427959f959c8a733bcbeedcfd3d3a7d82268c4518339
+# docker.io/openresty/openresty:1.27.1.2-11-alpine-fat
+FROM docker.io/openresty/openresty:1.27.1.2-11-alpine-fat@sha256:4486eb7c26b6e94c7fe144b9293319e855ecaed378b24cb56062d2af2cf81513
 
 LABEL org.opencontainers.image.vendor="Ministry of Justice" \
       org.opencontainers.image.authors="Analytical Platform (analytical-platform@digital.justice.gov.uk)" \