Add Trivy scanning to CI

Signed-off-by: Santosh Kaluskar <ksantosh@intelops.dev>

.github/workflows/ci.yaml

@@ -7,7 +7,8 @@ on:
   pull_request:
 
 permissions:
-  contents: read
+  contents: write
+  security-events: write
   # Optional: allow read access to pull request. Use with `only-new-issues` option.
   pull-requests: read
 
@@ -20,7 +21,7 @@ jobs:
       - uses: actions/setup-go@v4
         with:
           go-version: '1.21'
-          cache: false
+          cache: falsegithub/codeql-action/upload-sarif@v2
       - name: Run tests
         run: go test ./... -coverprofile=coverage.out -coverpkg=./... -covermode=atomic
       - name: golangci-lint