chore(deps): bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 #643

	name: Trivy vulnerability scanner
	on:
	push:
	branches:
	- master
	pull_request:
	jobs:
	build:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- name: Set up Go 1.x
	uses: actions/setup-go@v4
	with:
	go-version: ^1.19
	id: go

	- name: Checkout code
	uses: actions/checkout@v4

	- name: Build an image from Dockerfile
	run: \|
	export PUBLISH=true
	export REGISTRY=test
	export IMAGE_VERSION=latest
	export DOCKER_CLI_EXPERIMENTAL=enabled
	make container

	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: 'test/smb-csi:latest'
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'

Provide feedback