Add aquasecurity/trivy-action

[lhotari]

Request for adding a new GitHub Action to the allow list

Overview

GitHub Action for Trivy security scanner.

Name of action:
aquasecurity/trivy-action

URL of action:
https://github.com/marketplace/actions/aqua-security-trivy
https://github.com/aquasecurity/trivy-action

Version to pin to (hash only):
57a97c7e7821a5776cebc9bb87c984fa69cba8f1
(for tag v0.35.0)

Permissions

Related Actions

Checklist

You should be able to check most of these boxes for an action to be considered for review.
Please check all boxes that currently apply:

• The action is listed in the GitHub Actions Marketplace
• The action is not already on the list of approved actions
• The action has a sufficient number of contributors or has contributors within the ASF community
• The action has a clearly defined license
• The action is actively developed or maintained
• The action has CI/unit tests configured

[raboof]

(an expiration is not necessary, but can't hurt I suppose)