fix: enforce https

Author: achoimet

.github/workflows/reusable-cve-scan.yml

@@ -198,7 +198,7 @@ jobs:
           export AWS_ACCOUNT_ID
           
           # Download ASFF template explicitly (trivy-action does not ship contrib templates)
-          curl -fsSL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/asff.tpl -o asff.tpl
+          curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/asff.tpl -o asff.tpl
           
           trivy convert --format template --template "@asff.tpl" \
             --output trivy-results.asff trivy-results.json