fix: switch to standard trivy action

[chgl]

now that it no longer runs inside a container and can access the host registry where images are pushed in PRs

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ COPYPASTE	jscpd	yes		no		no	0.53s
✅ DOCKERFILE	hadolint	1		0		0	0.08s
✅ JSON	jsonlint	3		0		0	0.4s
✅ JSON	prettier	3		0		0	0.31s
✅ JSON	v8r	3		0		0	2.46s
✅ MARKDOWN	markdownlint	1		0		0	0.4s
✅ MARKDOWN	markdown-table-formatter	1		0		0	0.24s
✅ PYTHON	bandit	1		0		0	0.89s
✅ PYTHON	black	1		0		0	1.62s
✅ PYTHON	flake8	1		0		0	1.07s
✅ PYTHON	isort	1		0		0	0.6s
✅ PYTHON	mypy	1		0		0	2.86s
✅ PYTHON	pylint	1		0		0	2.49s
✅ PYTHON	pyright	1		0		0	1.44s
✅ PYTHON	ruff	1		0		0	0.05s
✅ REPOSITORY	betterleaks	yes		no		no	1.55s
⚠️ REPOSITORY	checkov	yes		no		2	23.32s
✅ REPOSITORY	devskim	yes		no		no	1.18s
✅ REPOSITORY	dustilock	yes		no		no	0.01s
✅ REPOSITORY	git_diff	yes		no		no	0.06s
✅ REPOSITORY	grype	yes		no		no	83.97s
✅ REPOSITORY	kingfisher	yes		no		no	6.24s
✅ REPOSITORY	secretlint	yes		no		no	0.6s
✅ REPOSITORY	syft	yes		no		no	2.73s
✅ REPOSITORY	trivy	yes		no		no	11.18s
✅ REPOSITORY	trivy-sbom	yes		no		no	0.38s
✅ REPOSITORY	trufflehog	yes		no		no	3.27s
⚠️ YAML	prettier	22		48		1	0.8s
✅ YAML	v8r	22		0		0	9.29s
✅ YAML	yamllint	22		0		0	0.75s

Detailed Issues

⚠️ REPOSITORY / checkov - 2 warnings

warning: Readiness Probe Should be Configured
 = Readiness Probe Should be Configured
 = Readiness Probe Should be Configured

warning: Liveness Probe Should be Configured
 = Liveness Probe Should be Configured
 = Liveness Probe Should be Configured

warning: 2 warnings emitted

⚠️ YAML / prettier - 48 errors

Checking formatting...
[warn] .github/workflows/standard-lint.yaml
[error] charts/test-chart/templates/deployment.yaml: SyntaxError: Block collections are not allowed within flow collections (6:7)
[error]   4 |   name: {{ include "test-chart.fullname" . }}
[error]   5 |   labels:
[error] > 6 |     {{- include "test-chart.labels" . | nindent 4 }}
[error]     |       ^^
[error]   7 | spec:
[error]   8 |   {{- if not .Values.autoscaling.enabled }}
[error]   9 |   replicas: {{ .Values.replicaCount }}
[error] charts/test-chart/templates/hpa.yaml: SyntaxError: Block collections are not allowed within flow collections (1:3)
[error] > 1 | {{- if .Values.autoscaling.enabled }}
[error]     |   ^^
[error]   2 | apiVersion: autoscaling/v2
[error]   3 | kind: HorizontalPodAutoscaler
[error]   4 | metadata:
[error] charts/test-chart/templates/httproute.yaml: SyntaxError: Block collections are not allowed within flow collections (1:3)
[error] > 1 | {{- if .Values.httpRoute.enabled -}}
[error]     |   ^^
[error]   2 | {{- $fullName := include "test-chart.fullname" . -}}
[error]   3 | {{- $svcPort := .Values.service.port -}}
[error]   4 | apiVersion: gateway.networking.k8s.io/v1
[error] charts/test-chart/templates/ingress.yaml: SyntaxError: Block collections are not allowed within flow collections (1:3)
[error] > 1 | {{- if .Values.ingress.enabled -}}
[error]     |   ^^
[error]   2 | apiVersion: networking.k8s.io/v1
[error]   3 | kind: Ingress
[error]   4 | metadata:
[error] charts/test-chart/templates/service.yaml: SyntaxError: Block collections are not allowed within flow collections (6:7)
[error]   4 |   name: {{ include "test-chart.fullname" . }}
[error]   5 |   labels:
[error] > 6 |     {{- include "test-chart.labels" . | nindent 4 }}
[error]     |       ^^
[error]   7 | spec:
[error]   8 |   type: {{ .Values.service.type }}
[error]   9 |   ports:
[error] charts/test-chart/templates/serviceaccount.yaml: SyntaxError: Block collections are not allowed within flow collections (1:3)
[error] > 1 | {{- if .Values.serviceAccount.create -}}
[error]     |   ^^
[error]   2 | apiVersion: v1
[error]   3 | kind: ServiceAccount
[error]   4 | metadata:
[error] charts/test-chart/templates/tests/test-connection.yaml: SyntaxError: Unexpected scalar at node end (4:22)
[error]   2 | kind: Pod
[error]   3 | metadata:
[error] > 4 |   name: "{{ include "test-chart.fullname" . }}-test-connection"
[error]     |                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
[error]   5 |   labels:
[error]   6 |     {{- include "test-chart.labels" . | nindent 4 }}
[error]   7 |   annotations:
Error occurred when checking code style in 7 files.

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_KICS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@10.1.0 --custom-flavor-setup --custom-flavor-linters PYTHON_PYLINT,PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_BANDIT,PYTHON_MYPY,PYTHON_PYRIGHT,PYTHON_RUFF,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_DEVSKIM,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,REPOSITORY_KINGFISHER,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[github-actions]

Trivy image scan report

ghcr.io/miracum/github-reusable-workflow-with-fixed-image-tags:v1.2.3-beta.123 (debian 13.7)

No Vulnerabilities found

[github-actions]

Trivy image scan report

ghcr.io/miracum/github-reusable-workflow-without-test-image:pr-221 (debian 13.7)

No Vulnerabilities found

[github-actions]

Trivy image scan report

ghcr.io/miracum/github-reusable-workflow:pr-221 (debian 13.7)

No Vulnerabilities found

[github-actions]

🎉 This PR is included in version 1.29.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀