fix(ci): prevent security scan from failing the workflow

Author: walmir-silva

.github/workflows/test.yml

@@ -102,16 +102,23 @@ jobs:
       packages: read
       security-events: write
     steps:
-      - name: Run Trivy scan
-        uses: aquasecurity/trivy-action@0.20.0
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@v0
         with:
           image-ref: ${{ needs.build.outputs.image_tag }}
           format: "sarif"
           output: "trivy-results.sarif"
           severity: "CRITICAL,HIGH"
-          github-pat: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Upload Trivy results
+          # Add these two lines to allow the workflow to continue
+          ignore-unfixed: true
+          exit-code: "0"
+
+      - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3
+        # This step will now run because the previous one succeeds
         with:
           sarif_file: "trivy-results.sarif"