Squashed 'release-tools/' changes from de06a09a7..909252797

909252797 Merge pull request #298 from torredil/trivy-schedule-trigger
2c9aed3e9 Merge pull request #299 from andyzhangx/patch-12
507ea1e90 chore: fix broken gcb-docker-gcloud image
ab1da0e96 Run Trivy scan on schedule instead of pull requests

git-subtree-dir: release-tools
git-subtree-split: 909252797a11793b90f81c1aff9d181b4eebd363

Author: andyzhangx

.github/workflows/trivy.yaml

@@ -3,7 +3,8 @@ on:
   push:
     branches:
       - master
-  pull_request:
+  schedule:
+    - cron: '0 0 * * *'  # Run daily at midnight UTC
 jobs:
   trivy:
     name: Build

cloudbuild.yaml

@@ -26,7 +26,7 @@ steps:
   # The image must contain bash and curl. Ideally it should also contain
   # the desired version of Go (currently defined in release-tools/prow.sh),
   # but that just speeds up the build and is not required.
-  - name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v20240718-5ef92b5c36'
+  - name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v20260205-38cfa9523f'
     entrypoint: ./.cloudbuild.sh
     env:
     - GIT_TAG=${_GIT_TAG}