Update aquasecurity/trivy-action action to v0.26.0 #588

	---

	name: Node.js CI Coverage

	on: # yamllint disable-line rule:truthy
	push:
	branches: ["main"]
	pull_request:
	# The branches below must be a subset of the branches above
	branches: ["main"]
	workflow_dispatch:

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
	with:
	fetch-depth: 0

	- name: Set up Node.js
	uses: actions/setup-node@v4
	with:
	node-version: 22.x

	- name: Install dependencies
	run: npm ci --verbose

	- name: Lint
	run: npm run lint

	- name: Run the tests
	run: npm run jest:ci -- --coverage

	- name: Upload coverage reports to Codecov with GitHub Action
	uses: codecov/codecov-action@v4
	with:
	token: ${{ secrets.CODECOV_TOKEN }} # required
	verbose: true # optional (default = false)

	- name: SonarCloud Scan
	uses: SonarSource/sonarcloud-github-action@master
	env:
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
	# Needed to get PR information, if any
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback