Replace tfsec with trivy on github workflows and renovate.json

[za]

Issue: #1764

What kind of changes does this PR include?

• Fixes or refactors
• A new challenge
• Additional documentation
• Something else

Description

Update to trivy because tfsec is no longer updated

Relations

Closes #1764

Checklist:

• All the contributions made are solely the work of me and my co-authors
• I tested the changes in this PR (if applicable)
• I added unit tests to ensure my change works (when change in Java or on front-end code)
• I added UI tests to ensure my UI changes work (when change in the overall UI, not needed if just adding a challenge)
• The PR passes pre-commit hooks and automated tests

[commjoen]

Good morning @za ! Good to see you back here. It seems there are some errors: can you please check https://github.com/OWASP/wrongsecrets/actions/runs/12352280456/job/34468977401?pr=1801 ?

[za]

Hi @commjoen it's almost midnight here ;) How do I set TRIVY_VERSION hence I am not the maintainer of this repo?

[za]

Hi @commjoen it's almost midnight here ;) How do I set TRIVY_VERSION hence I am not the maintainer of this repo?

Wait, now I see TRIVY_VERSION in the pre-commit.yml file @commjoen I'm making the changes now...

[za]

Hi @commjoen now all checks have passed 🎉 Can you review the PR?

[commjoen]

Thank you for your PR sir! Hope to have a look next week,

[za]

Thank you for your PR sir! Hope to have a look next week,

Thanks sir @commjoen !

[commjoen]

Lgtm! Thank you @za !

[za]

Hi @commjoen I was wondering, how we execute trivy in the pre-commit/CI-CD pipeline? As I can see in these changes are only download/setup trivy.

[commjoen]

When you do ‘pre-commit install’ it will install the toolchain and do the checks on change within the scope of your new commit.