ci(security): add trivy fs scan job

    paths:

      - gitleaks-junit.xml

high-critical-scan:

  image:

    name: aquasec/trivy:latest

    entrypoint: [""]

  stage: code-quality

  <<: *build_rules

  needs: []

  variables:

    TRIVY_CACHE_DIR: ".trivycache/"

  script:

    - trivy fs --severity HIGH,CRITICAL --exit-code 1 --no-progress --format template --template "@/contrib/junit.tpl" --output trivy-fs-junit.xml .

  artifacts:

    when: always

    reports:

      junit: trivy-fs-junit.xml

    paths:

      - trivy-fs-junit.xml

generate-apks:

  stage: build

  <<: *rules_publish