Feature Request: Integrate Trivy Vulnerability Scanner into sbomqs`

[viveksahu26]

Description:

sbomqs currently lacks a vulnerability scanner, which is essential for identifying potential security risks in the software components. Integrating a Trivy vulnerability scanner can enhance the security assessment capabilities of sbomqs.

currently we scan sbomqs images manually using trivy and found one vulnerability as mentioned in this issue #298

Importance of Trivy Scan:

Trivy is a comprehensive and easy-to-use vulnerability scanner for container images, file systems, and Git repositories, suitable for detecting vulnerabilities, misconfigurations, and secrets.

Solution

Integrate the Trivy vulnerability scanner into sbomqs to automatically scan the SBOM for vulnerabilities in the components.
https://github.com/marketplace/actions/aqua-security-trivy

[viveksahu26]

@riteshnoronha , should we integrate this ?