Fix Trivy image scanner

[torredil]

What is this PR about? / Why do we need it?

This PR addresses a recurring issue with the Trivy image scanner action:

2024-01-21T00:26:20.3634014Z 2024-01-21T00:26:20.362Z	�[31mFATAL�[0m	image scan error: scan error: unable to initialize a scanner: unable to initialize a docker scanner: 4 errors occurred:
2024-01-21T00:26:20.3637568Z 	* unable to inspect the image (public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.1.3): Error response from daemon: No such image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.1.3
2024-01-21T00:26:20.3639509Z 	* containerd socket not found: /run/containerd/containerd.sock
2024-01-21T00:26:20.3640750Z 	* unable to initialize Podman client: no podman socket found: stat podman/podman.sock: no such file or directory
2024-01-21T00:26:20.3643245Z 	* GET https://public.ecr.aws/v2/ebs-csi-driver/volume-modifier-for-k8s/manifests/sha256:8e7a38bbcd7799567dd53cd912ef81d31f06354aeef15c7b9dc6a624e88ce254: TOOMANYREQUESTS: Rate exceeded
2024-01-21T00:26:20.3645075Z 
2024-01-21T00:26:20.3645084Z 
2024-01-21T00:26:20.5549268Z ##[group]Run github/codeql-action/upload-sarif@v2
2024-01-21T00:26:20.5549656Z with:
2024-01-21T00:26:20.5549873Z   sarif_file: results.sarif
2024-01-21T00:26:20.5550298Z   checkout_path: /home/runner/work/aws-ebs-csi-driver/aws-ebs-csi-driver
2024-01-21T00:26:20.5550934Z   token: ***
2024-01-21T00:26:20.5551366Z   matrix: {
  "image": "public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.1.3"
}
2024-01-21T00:26:20.5551875Z   wait-for-processing: true

More specifically, this PR fixes errors during image pulls due to unauthenticated rate limits and adds an explicit step to pull the container images before initiating the Trivy scan.

See the logs

What testing is done?

Manual

[github-actions]

Code Coverage Diff

This PR does not change the code coverage

[AndrewSirenko]

Nice catch on non-authenticated rate limits being different, and thanks for version bump.

[torredil]

/retest

[ConnorJC3]

/lgtm

[torredil]

/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: torredil

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [torredil]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment