chore(deps): bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 #112

	name: Trivy vulnerability scanner
	on:
	push:
	branches:
	- main
	pull_request:
	jobs:
	build:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- name: Set up Go 1.x
	uses: actions/setup-go@v6
	with:
	go-version: 1.25.3
	id: go

	- name: Checkout code
	uses: actions/checkout@v5

	- name: Build an image from Dockerfile
	run: \|
	make build
	docker buildx build --no-cache --output=type=docker -t test/lws:latest \
	--platform=linux/amd64 \
	--build-arg BASE_IMAGE=gcr.io/distroless/static:nonroot \
	--build-arg BUILDER_IMAGE=golang:1.25.3 \
	--build-arg CGO_ENABLED=0 \
	-f ./Dockerfile .

	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/trivy-action@master
	env:
	TRIVY_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-db:2"
	with:
	image-ref: 'test/lws:latest'
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'

Provide feedback