feat: add coderabbit and simplify Trivy scan output

[bniladridas]

Modify Trivy vulnerability scanner configuration and add CodeRabbit to utilities

• Modified Trivy vulnerability scanner configuration to output results in table format instead of SARIF
• Removed GitHub Security tab integration for Trivy scan results
• Added continue-on-error: true to allow workflow to proceed even if Trivy scan fails
• Added CodeRabbit CLI installation to homebrew-scripts/install-utilities.sh

[changeset-bot]

⚠️ No Changeset found

Latest commit: 530f3e1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[coderabbitai]

Warning

Rate limit exceeded

@bniladridas has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 2 minutes and 34 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

📝 Walkthrough

Walkthrough

Added coderabbit to the Homebrew install list in homebrew-scripts/install-utilities.sh and granted permissions.actions: read to the trivy job in .github/workflows/pre-commit.yml; no other control flow, steps, or messages were changed.

Changes

Cohort / File(s)	Summary
Homebrew utilities script homebrew-scripts/install-utilities.sh	Added coderabbit to the brew install package list. No other logic, error handling, or output changes.
CI workflow (Trivy job permissions) .github/workflows/pre-commit.yml	Added permissions.actions: read to the trivy job's permissions block; existing permissions and job steps remain unchanged.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Poem

🐰 I nibble on scripts beneath the pale moon,
A new friend hops in—coderabbit soon,
Permissions whispered to let checks take flight,
I bound through lines, delighted at night,
Small changes, big cheer—code feels light!

---

Note

🎁 Summarized by CodeRabbit Free

Your organization is on the Free plan. CodeRabbit will generate a high-level summary and a walkthrough for each pull request. For a comprehensive line-by-line review, please upgrade your subscription to CodeRabbit Pro by visiting https://app.coderabbit.ai/login.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[gemini-code-assist]

Summary of Changes

Hello @bniladridas, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request streamlines the development environment setup by integrating the CodeRabbit CLI installation directly into the existing utility script. This enhancement automates the process of getting the CodeRabbit CLI onto new systems, improving consistency and reducing manual setup time for developers.

Highlights

• CodeRabbit CLI Installation: The CodeRabbit CLI installation steps have been added to the homebrew-scripts/install-utilities.sh script, ensuring it's automatically set up with other common utilities.

Changelog

• homebrew-scripts/install-utilities.sh
  • Added commands to download and execute the CodeRabbit CLI installation script.
  • Included echo statements to indicate the start and completion of the CodeRabbit CLI installation.

Activity

• No specific activity (comments, reviews, progress) has been recorded for this pull request yet.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This pull request adds the installation of the CodeRabbit CLI to the install-utilities.sh script. However, the current method of installation, which pipes curl output directly to sh, introduces a significant security risk by executing unverified code from a remote source. This practice has been flagged as a medium-severity issue. It is recommended to use Homebrew for installation if a formula is available, or a safer alternative that involves downloading, verifying, and then executing the script, to maintain consistency and improve security.