It's great that you have trivy to highlight security issues, I'd suggest you'll add [KICS](https://github.com/checkmarx/kics) as well. Will be happy to help if you want.