[bojemoi] ci: add Trivy security scan workflow (misconfig + secrets)

Commit a0760dd

Description

Scans 30+ Dockerfiles and 10 stack YAMLs for HIGH/CRITICAL misconfigurations and exposed secrets on every push to main. Advisory mode (exit-code 0) to avoid blocking deployments during initial noise triage.

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

Files Changed

Diff Summary