Add Trivy IaC security scan

Enhance build security by integrating Trivy IaC static code analysis
tool.

.github/workflows/checkov.yml

@@ -21,3 +21,17 @@ jobs:
         with:
           framework: dockerfile
           quiet: true
+  trivy:
+    name: Run Trivy for IaC Security Analysis
+    runs-on: ubuntu-20.04
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Run Trivy vulnerability scanner in repo mode
+        uses: aquasecurity/trivy-action@master
+        with:
+          scan-type: "fs"
+          ignore-unfixed: true
+        env:
+          TRIVY_MISCONFIG_SCANNERS: dockerfile