add trivy scan to pipeline

.gitea/workflows/build_push.yml

@@ -44,6 +44,16 @@ jobs:
           tags: |
             git.aridgwayweb.com/armistace/blog:latest
 
+      - name: Trivy Scan
+        uses: aquasecurity/trivy-action@0.28.0
+        with:
+          image-ref: ${{ vars.DOCKER_SERVER }}/${{ vars.DOCKER_USERNAME }}/blog:latest
+          format: table
+          exit-code: 1
+          ignore-unfixed: true
+          vuln-type: os,library
+          severity: HIGH,CRITICAL
+
       - name: Deploy
         run: |
           echo "Installing Kubectl"