chore: add trivy action for vulnerability scanner

[gaius-qi]

Description

This pull request includes the addition of a Trivy vulnerability scanner and the upload of scan results to the GitHub Security tab in the .github/workflows/docker.yml file. These changes enhance the security checks during the CI/CD pipeline.

Security enhancements:

• Added a step to run the Trivy vulnerability scanner in tarball mode, scanning for critical and high severity issues, and outputting the results in SARIF format. [1] [2]
• Added a step to upload the Trivy scan results to the GitHub Security tab using the github/codeql-action/upload-sarif action. [1] [2]

Related Issue

dragonflyoss/dragonfly#3811

Motivation and Context

Screenshots (if appropriate)

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 33.12%. Comparing base (d0fa28a) to head (c347fa3).
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #983   +/-   ##
=======================================
  Coverage   33.12%   33.12%           
=======================================
  Files          59       59           
  Lines        9750     9750           
=======================================
  Hits         3230     3230           
  Misses       6520     6520           

[CormickKneey]

lgtm