Merge pull request #11468 from hzi-braunschweig/ci/7542-trivy-scanner…

…-new

[#7542] only comment on PR event, not on branch push

.github/workflows/ci.yml

@@ -79,14 +79,15 @@ jobs:
 
       - name: Comment with SonarCloud analysis
         uses: actions/github-script@v6
+        if: github.event_name == 'pull_request'
         with:
           github-token: ${{ secrets.SORMAS_VITAGROUP_TOKEN }}
           script: |
             github.rest.issues.createComment({
               issue_number: context.issue.number,
               owner: context.repo.owner,
               repo: context.repo.repo,
-              body: `SonarCloud analysis: Please find the results at https://sonarcloud.io/dashboard?id=SORMAS-Project&pullRequest=${{ github.event.pull_request.number }}`
+              body: `SonarCloud analysis: https://sonarcloud.io/dashboard?id=SORMAS-Project&pullRequest=${{ github.event.pull_request.number }}`
             })
 
       - name: Perform CodeQL Analysis