fix(ci): update trivy-action to use master

[jsjoeio]

Problem

In ci.yaml, we have a job called trivy-scan-repo which scans the repo for vulnerabilities using trivy-action. It then uploads those results to the GitHub Security tab. It's failing due to this error (see logs):

Error: Unable to upload "trivy-repo-results.sarif" as it is not valid SARIF:
- instance.runs[0].tool.driver.rules contains duplicate item

This issue was filed back in December 2020 and fixed in `trivy on March 23 (see PR).

According to the maintainers, this fix should be in trivy-action because:

Trivy Action uses the latest released version of Trivy https://github.com/aquasecurity/trivy-action/blob/master/Dockerfile#L1
Trivy recently had a new release which includes this fix so by the virtue of that the new Trivy Action will also have it.

Reference: aquasecurity/trivy-action#22 (comment)

UPDATE: they're looking into it
Reference: aquasecurity/trivy-action#22 (comment)

[codecov]

Codecov Report

Merging #3296 (286c857) into main (b798bfd) will increase coverage by 2.76%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #3296      +/-   ##
==========================================
+ Coverage   54.78%   57.54%   +2.76%     
==========================================
  Files          23       24       +1     
  Lines        1265     1279      +14     
  Branches      286      290       +4     
==========================================
+ Hits          693      736      +43     
+ Misses        460      441      -19     
+ Partials      112      102      -10     

Impacted Files	Coverage Δ
src/node/entry.ts	0.00% <0.00%> (ø)
src/node/constants.ts	100.00% <0.00%> (ø)
src/node/main.ts	36.78% <0.00%> (ø)
src/node/cli.ts	77.87% <0.00%> (+0.18%)	⬆️
src/node/util.ts	48.97% <0.00%> (+2.04%)	⬆️
src/node/coder_cloud.ts	28.57% <0.00%> (+28.57%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update b798bfd...286c857. Read the comment docs.

[jsjoeio]

Closing in favor of #3341