WIP: initial introduction trivy scan

[cooktheryan]

          image-ref: quay.io/fetchit/fetchit-amd:latest
          format: 'github'
          exit-code: '1'
          ignore-unfixed: true
          output: 'dependency-results.sbom.json'
          github-token: ${{ secrets.GITHUB_TOKEN }}
          vuln-type: 'os,library'
          severity: 'CRITICAL,HIGH'```