fixup! feat: scanning the entire repository

.github/workflows/trivy.yml

@@ -72,15 +72,15 @@ jobs:
       #    branch: update-vulnerabilities
       #    base: master
 
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/[email protected]
+        with:
+          scan-type: 'fs'
+          format: 'arif'
+          output: 'trivy-results.sarif'
+          severity: 'CRITICAL,HIGH'
 
-      - name: Install Trivy
-        run: |
-          sudo apt-get update
-          sudo apt-get install wget -y
-          wget https://github.com/aquasecurity/trivy/releases/download/v0.34.0/trivy_0.34.0_Linux-64bit.deb
-          sudo dpkg -i trivy_0.34.0_Linux-64bit.deb
-
-      - name: Scan the entire repository
-        run: |
-          echo "Scanning the entire repository..."
-          trivy fs .
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy-results.sarif'