Merge pull request #1106 from andyzhangx/fix-mountpermissions-chmod #1665

	name: Trivy vulnerability scanner
	on:
	push:
	branches:
	- master
	schedule:
	- cron: '0 0 * * *' # Run daily at midnight UTC
	jobs:
	build:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

	- name: Install go
	uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
	with:
	go-version: 1.25.9

	- name: Build an image from Dockerfile
	run: \|
	export PUBLISH=true
	export REGISTRY=test
	export IMAGE_VERSION=latest
	export DOCKER_CLI_EXPERIMENTAL=enabled
	export ARCH=amd64
	go version
	make nfs
	make container-build

	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
	env:
	TRIVY_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-db:2"
	with:
	image-ref: 'test/nfsplugin:latest-linux-amd64'
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'

Provide feedback