Add job trivy

Author: kerobero

.github/workflows/main.yml

@@ -102,26 +102,26 @@ jobs:
     runs-on: self-hosted
     needs: [build]
     steps:
-      - name: Trivy image (CRITICAL,HIGH)
-        uses: aquasecurity/trivy-action@0.28.0
-        with:
-          scan-type: fs
-          image-ref: demo-app:local
-          format: sarif
-          output: trivy-image.sarif
-          ignore-unfixed: true
-          severity: CRITICAL,HIGH
-      - uses: github/codeql-action/upload-sarif@v3
-        with: { sarif_file: trivy-image.sarif }
-
-      # - name: Trivy fs (SCA sobre el repo)
+      # - name: Trivy image (CRITICAL,HIGH)
       #   uses: aquasecurity/trivy-action@0.28.0
       #   with:
       #     scan-type: fs
-      #     scan-ref: .
+      #     image-ref: demo-app:local
       #     format: sarif
-      #     output: trivy-fs.sarif
+      #     output: trivy-image.sarif
       #     ignore-unfixed: true
       #     severity: CRITICAL,HIGH
       # - uses: github/codeql-action/upload-sarif@v3
-      #   with: { sarif_file: trivy-fs.sarif }
+      #   with: { sarif_file: trivy-image.sarif }
+
+      - name: Trivy fs (SCA sobre el repo)
+        uses: aquasecurity/trivy-action@0.28.0
+        with:
+          scan-type: fs
+          scan-ref: .
+          format: sarif
+          output: trivy-fs.sarif
+          ignore-unfixed: true
+          severity: CRITICAL,HIGH
+      - uses: github/codeql-action/upload-sarif@v3
+        with: { sarif_file: trivy-fs.sarif }