Add .gitea/workflows/*.yaml

.gitea/workflows/010_ci_docker_image.yaml

@@ -103,18 +103,18 @@ jobs:
         with:
           name: image
           path: /tmp
-      - name: Load image
+      - name: Scan saved image tar with Trivy via Docker
         run: |
-          docker load --input /tmp/image.tar
-          docker image ls -a
-      - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@0.28.0
-        with:
-          image-ref: ${{ inputs.image-name }}:${{ inputs.image-tag }}
-          format: 'json'
-          output: 'trivy-results.json'
-          severity: 'CRITICAL,HIGH'
-          cache: 'false' # Disable built-in cache
+          pwd
+          docker run --rm \
+            -v /tmp:/tmp \
+            -v "$PWD":/work \
+            aquasec/trivy:0.52.2 image \
+            --input /tmp/image.tar \
+            --format json \
+            --output /work/trivy-results.json \
+            --severity CRITICAL,HIGH \
+            --ignore-unfixed
       - name: Upload results
         uses: actions/upload-artifact@v3
         with: