deps(go): Bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob (… #645

	name: Trivy Scan
	on:
	push:
	branches: [ main ]
	tags: [ 'v*' ]
	pull_request:
	branches: [ main ]

	jobs:
	trivy:
	permissions:
	security-events: write
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Install Trivy
	uses: aquasecurity/[email protected]
	with:
	version: v0.56.2
	cache: true
	- name: Download Trivy DB
	run: \|
	trivy fs --no-progress --download-db-only --db-repository public.ecr.aws/aquasecurity/trivy-db
	- name: Run Trivy vulnerability scanner (table output)
	run: \|
	trivy fs \
	--scanners vuln \
	--format table \
	--exit-code 1 \
	--ignore-unfixed \
	--pkg-types os,library \
	--severity CRITICAL,HIGH \
	--skip-db-update \
	.
	- name: Run Trivy vulnerability scanner
	run: \|
	trivy fs \
	--scanners vuln \
	--format sarif \
	--output trivy-results.sarif \
	--ignore-unfixed \
	--pkg-types os,library \
	--ignorefile .trivyignore \
	--skip-db-update \
	.
	if: always() && github.repository == 'hairyhenderson/go-fsimpl'
	- name: Upload Trivy scan results to GitHub Security tab
	if: always() && github.repository == 'hairyhenderson/go-fsimpl'
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: 'trivy-results.sarif'

Provide feedback