Add vulnerability scanner trivy to CI pipeline (#28)

* chore: update packages to solve vulnerability report
* feat: Add trivy vulnerability scanner in CI process

.github/workflows/github-actions-test.yml

@@ -7,6 +7,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+      - name: Run Trivy vulnerability scanner in fs mode
+        uses: aquasecurity/[email protected]
+        with:
+          scan-type: "fs"
+          scan-ref: "."
+          trivy-config: trivy.config.yaml
       - uses: actions/setup-node@v4
         with:
           node-version: 20

package.json

@@ -29,49 +29,49 @@
     "@aws-lite/client": "^0.22.4",
     "@aws-lite/dynamodb": "^0.3.8",
     "@effective/shadow": "^1.1.0",
-    "@remix-run/node": "^2.11.0",
-    "@remix-run/react": "^2.11.0",
-    "@remix-run/serve": "^2.11.0",
-    "@sentry/remix": "^8.25.0",
-    "@sentry/vite-plugin": "^2.22.0",
+    "@remix-run/node": "^2.11.1",
+    "@remix-run/react": "^2.11.1",
+    "@remix-run/serve": "^2.11.1",
+    "@sentry/remix": "^8.26.0",
+    "@sentry/vite-plugin": "^2.22.2",
     "@unpic/react": "^0.1.14",
     "clsx": "^2.1.1",
     "feed": "^4.2.2",
-    "isbot": "^5.1.13",
+    "isbot": "^5.1.15",
     "nanoid": "^5.0.7",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "remark-frontmatter": "^5.0.0",
     "remark-mdx-frontmatter": "^5.0.0",
-    "web-vitals": "^4.2.2"
+    "web-vitals": "^4.2.3"
   },
   "devDependencies": {
     "@aws-lite/dynamodb-types": "^0.3.10",
-    "@commitlint/cli": "^19.3.0",
+    "@commitlint/cli": "^19.4.0",
     "@commitlint/config-conventional": "^19.2.2",
     "@effective/color": "^1.0.1",
     "@effective/css-reset": "^3.1.0",
     "@effective/eslint-config": "^5.4.7",
     "@effective/favicon": "^2.3.0",
     "@mdx-js/rollup": "^3.0.1",
-    "@remix-run/dev": "^2.11.0",
-    "@storybook/react": "^8.2.7",
-    "@types/node": "^20.14.13",
+    "@remix-run/dev": "^2.11.1",
+    "@storybook/react": "^8.2.9",
+    "@types/node": "^20.14.15",
     "@types/react": "^18.3.3",
     "@types/react-dom": "^18.3.0",
     "@vanilla-extract/css": "^1.15.3",
     "@vanilla-extract/vite-plugin": "^4.0.13",
-    "@vercel/remix": "^2.11.0",
+    "@vercel/remix": "^2.11.1",
     "ajv-cli": "^5.0.0",
     "eslint": "^8.57.0",
-    "npm-check-updates": "^17.0.0",
+    "npm-check-updates": "^17.0.6",
     "prettier": "^3.3.3",
     "sst": "ion",
     "svgo": "^3.3.2",
-    "tsx": "^4.16.5",
+    "tsx": "^4.17.0",
     "typescript": "^5.5.4",
     "typescript-json-schema": "^0.64.0",
-    "vite": "^5.3.5",
+    "vite": "^5.4.0",
     "vite-tsconfig-paths": "^4.3.2"
   },
   "packageManager": "[email protected]+sha512.38dc6fba8dba35b39340b9700112c2fe1e12f10b17134715a4aa98ccf7bb035e76fd981cf0bb384dfa98f8d6af5481c2bef2f4266a24bfa20c34eb7147ce0b5e",