feat(container-image-scan) - implement container image scan in GHA CI

[abhisheksr01]

Description

Implement container image scan in GHA CI.

Use Case

To ensure the container image usage is secure.

Proposed Solution

• Use Trivy Marketplace action for scanning container image before publishing the image in docker-build-push job.
• If image is vulnerable than they do publish the image.
• If image is vulnerable and exception is granted then the image should be published..

Benefits

• Shift left
• Secure usage of container images
• Improved security posture

Example:

• Provide examples of how the feature will work or how it will be used, if possible.

Additional Information

https://github.com/marketplace/actions/aqua-security-trivy