add hpu to ci-release (llm-d#918)

Signed-off-by: Diego-Castan <diego.castan@ibm.com>

Author: diegocastanibm

.github/workflows/ci-release.yaml

@@ -874,3 +874,63 @@ jobs:
           else
             echo "No vulnerabilities found or scan failed."
           fi
+
+  release-hpu-llm-d:
+    strategy:
+      fail-fast: false
+    runs-on: vllm-runner
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+        with:
+          ref: ${{ env.TAG }}
+          fetch-depth: 0
+
+      - name: Log in to Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ secrets.GHCR_USER }}
+          password: ${{ secrets.GHCR_TOKEN }}
+
+      - name: Build and push the image
+        id: build-and-push
+        run: |
+          export DEVICE=hpu
+          export DOCKERFILE=Dockerfile.hpu
+          export VERSION="${{ env.TAG }}"
+          make image-build
+          make image-push
+          echo "tag=${{ env.TAG }}" >> $GITHUB_OUTPUT
+          # Also tag as latest
+          export NEW_TAG="latest"
+          make image-retag
+          VERSION="latest" make image-push
+
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: ${{ env.REGISTRY }}/${{ github.repository }}-hpu:${{ env.TAG }}
+          format: 'sarif'
+          output: 'trivy-results.sarif'
+          severity: 'CRITICAL,HIGH,MEDIUM'
+          scanners: vuln
+          timeout: 30m
+          skip-dirs: /root/.cache/uv
+        env:
+          TRIVY_USERNAME: ${{ secrets.GHCR_USER }}
+          TRIVY_PASSWORD: ${{ secrets.GHCR_TOKEN }}
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: 'trivy-results.sarif'
+
+      - name: Display vulnerability summary
+        run: |
+          echo "=== Vulnerability Scan Summary ==="
+          if [ -f trivy-results.sarif ]; then
+            echo "Scan completed. Check the Security tab for detailed results."
+          else
+            echo "No vulnerabilities found or scan failed."
+          fi