Weekly security scan #130

	name: Weekly security scan

	on:
	schedule:
	# Cron for every Monday at 12:00 UTC.
	- cron: "0 12 * * 1"

	# Remove all permissions from GITHUB_TOKEN except metadata.
	permissions: {}

	jobs:
	scan:
	strategy:
	fail-fast: false
	matrix:
	branch: [ main, release-1.12, release-1.11, release-1.10 ]
	name: Trivy
	runs-on: ubuntu-latest
	steps:
	- name: Check out code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # tag=v6.0.2
	with:
	ref: ${{ matrix.branch }}
	- name: Calculate go version
	id: vars
	run: echo "go_version=$(make go-version)" >> $GITHUB_OUTPUT
	- name: Set up Go
	uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # tag=v6.2.0
	with:
	go-version: ${{ steps.vars.outputs.go_version }}
	- name: Run verify security target
	run: make verify-security

Provide feedback