ci(actions): bump aquasecurity/trivy-action from 0.30.0 to 0.36.0

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.30.0 to 0.36.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@0.30.0...v0.36.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/security-scan.yml

@@ -151,7 +151,7 @@ jobs:
         run: mkdir -p "$SECURITY_REPORT_DIR"
 
       - name: Scan container image for vulnerable OS packages
-        uses: aquasecurity/trivy-action@0.30.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: subtrackr-api:${{ github.sha }}
           format: json
@@ -160,7 +160,7 @@ jobs:
           exit-code: '0'
 
       - name: Scan Dockerfile and IaC configuration
-        uses: aquasecurity/trivy-action@0.30.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: config
           scan-ref: .