step 1: move to OSS, update imports #890

	---
	name: test

	# Run for all pushes to main and pull requests when Go or YAML files change
	on:
	push:
	branches:
	- main
	schedule:
	- cron: '23 20 * * 2'
	pull_request:

	jobs:
	scan-trivy-1:
	name: sec-scan-trivy-1
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v3

	- name: Build
	uses: docker/build-push-action@v4
	with:
	context: .
	file: ./Dockerfile.dev
	push: false
	load: true
	tags: localbuild/sec-scan-trivy:latest
	build-args: \|
	ACTIONS_BOT_GITHUB_PAT=${{ secrets.ACTIONS_BOT_GITHUB_PAT }}

	- name: Scan image
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: localbuild/sec-scan-trivy:latest
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH'

Provide feedback