chore: fix trivy upload-sarif category, narrow test.yaml paths

Author: aardbol

.github/workflows/test.yaml

@@ -6,11 +6,10 @@ on:
     paths:
       - 'internal/**'
       - 'cmd/**'
-      - 'vendor/**'
       - 'go.*'
-      - '.github/**'
       - 'test/**'
       - '.github/workflows/test.yaml'
+      - '.github/workflows/_reusable-build.yaml'
   pull_request:
 
 env:
@@ -31,11 +30,10 @@ jobs:
             go:
               - 'internal/**'
               - 'cmd/**'
-              - 'vendor/**'
               - 'go.*'
-              - '.github/**'
               - 'test/**'
               - '.github/workflows/test.yaml'
+              - '.github/workflows/_reusable-build.yaml'
 
       - if: steps.filter.outputs.go == 'true'
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0

.github/workflows/trivy-scan.yaml

@@ -64,6 +64,7 @@ jobs:
         uses: github/codeql-action/upload-sarif@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3.36.2
         with:
           sarif_file: 'trivy-fs-results.sarif'
+          category: trivy-fs
 
       - if: github.event_name == 'schedule'
         name: Run Trivy vulnerability scanner (image)
@@ -80,3 +81,4 @@ jobs:
         uses: github/codeql-action/upload-sarif@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3.36.2
         with:
           sarif_file: 'trivy-image-results.sarif'
+          category: trivy-image