Feat: Add trivy vulnerability scan and upload report via github workflow

Author: mrajagopal

.github/workflows/docker-build.yml

@@ -31,5 +31,16 @@ jobs:
           push: true
           tags: ghcr.io/nginx/nginx-utils:latest
 
+  # Step 5: Install Trivy for Vulnerability Scanning
+      - name: Install Trivy
+        uses: aquasecurity/[email protected]
+        with:
+          image-ref: ghcr.io/${{ github.repository_owner }}/nginx-utils:latest
+          format: json
+          output: vuln-report.json
 
-
+      - name: Upload Vulnerability Report
+        uses: actions/upload-artifact@v3
+        with:
+          name: vuln-report
+          path: vuln-report.json