[CI] Add Trivy vulnerables check

Signed-off-by: v.oleynikov <vasily.oleynikov@flant.com>

.github/workflows/trivy_check.yaml

@@ -0,0 +1,23 @@
+name: Trivy check for sub repos
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+jobs:
+  test:
+    name: Trivy check for sub repos
+    runs-on: [self-hosted, regular]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v2
+
+      - name: Run Trivy vulnerability scanner in fs mode
+        uses: aquasecurity/trivy-action@master
+        with:
+          scan-type: 'fs'
+          scan-ref: '.'
+          trivy-config: trivy.yaml

trivy.yaml

@@ -0,0 +1,2 @@
+format: table
+exit-code: 1