Trivy

fix: generic template updated (#128) #545

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.

	name: Trivy

	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main
	schedule:
	# Run at 21:35 (9:35 PM UTC) every Wednesday
	- cron: "35 21 * * 3"

	permissions:
	contents: read
	pull-requests: write
	actions: read
	security-events: write

	jobs:
	scan:
	name: Trivy Security Scan
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v5
	with:
	# Using GITHUB_TOKEN instead for basic checkout
	token: ${{ secrets.GITHUB_TOKEN }}

	- name: Run Trivy vulnerability scanner
	uses: atlanhq/application-sdk/.github/actions/trivy@main
	with:
	add-report-comment-to-pr: "true"
	env:
	GITHUB_TOKEN: ${{ secrets.ORG_PAT_GITHUB }}

Provide feedback