f685ba7215
* ci: use action.yaml as single source of truth for Trivy version * dev: add yq check and configurable Trivy install directory