feat(.github): add trivy to pipeline

.github/workflows/build.yml

@@ -149,6 +149,18 @@ jobs:
       - name: Check formatting
         run: ./scripts/check-formatting.sh
 
+  security_scan:
+    name: Security scan with trivy
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+      - name: Scan with trivy
+        uses: aquasecurity/[email protected]
+        with:
+          scan-type: "fs"
+          scan-ref: "."
+          trivy-config: trivy.yaml
+
   build_image:
     name: Build image
     runs-on: ubuntu-24.04