feat: enable custom HTTP headers configuration via environment variable #66

	name: Trivy Security Scan

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	- cron: "0 0 1 1,4,7,10 *" # Quarterly scan on 1st day of Jan, Apr, Jul, Oct
	workflow_dispatch: # Allow manual trigger

	jobs:
	trivy-scan:
	name: Trivy Security Scan
	runs-on: ubuntu-latest
	permissions:
	contents: read
	security-events: write
	actions: read

	steps:
	- name: Checkout repository
	uses: actions/checkout@v6

	- name: Run Trivy vulnerability scanner in repo mode
	uses: aquasecurity/[email protected]
	with:
	scan-type: 'fs'
	scan-ref: '.'
	format: 'sarif'
	output: 'trivy-results.sarif'
	severity: 'CRITICAL,HIGH,MEDIUM'
	scanners: 'vuln,secret,misconfig'

	- name: Upload Trivy results to GitHub Security tab
	uses: github/codeql-action/upload-sarif@v4
	if: always()
	with:
	sarif_file: 'trivy-results.sarif'

	- name: Run Trivy vulnerability scanner (table output)
	uses: aquasecurity/[email protected]
	if: always()
	with:
	scan-type: 'fs'
	scan-ref: '.'
	format: 'table'
	severity: 'CRITICAL,HIGH'
	scanners: 'vuln,secret,misconfig'
	exit-code: '1'

Provide feedback