fix(1.31): pin setup-trivy to v0.2.6 by SHA (GHSA-69fq-xp46-6x23) (#5431)

* fix: pin setup-trivy to v0.2.6 by SHA (GHSA-69fq-xp46-6x23)

* tests: fix prettier formatting in cni.yaml

Author: louiseschmidtgen

.github/workflows/build-snap.yml

@@ -173,7 +173,7 @@ jobs:
         run: |
           mkdir -p sarifs
       - name: Install Trivy vulnerability scanner
-        uses: aquasecurity/setup-trivy@v0.2.2
+        uses: aquasecurity/setup-trivy@3fb12ec12f41e471780db15c232d5dd185dcb514 # v0.2.6
       - name: Run Trivy vulnerability scanner on codebase
         run: |
           trivy fs . --format sarif --severity CRITICAL > sarifs/trivy-microk8s-repo-scan--results.sarif

tests/unit/yamls/cni.yaml

@@ -3531,7 +3531,6 @@ status:
   storedVersions: []
 
 ---
-
 ---
 # Source: calico/templates/calico-kube-controllers-rbac.yaml
 
@@ -3618,7 +3617,6 @@ subjects:
     name: calico-kube-controllers
     namespace: kube-system
 ---
-
 ---
 # Source: calico/templates/calico-node-rbac.yaml
 # Include a clusterrole for the calico-node DaemonSet,