Update trivy to run on local image

Signed-off-by: Bryan Frimin <bryan@getprobo.com>

.github/workflows/make.yaml

@@ -28,11 +28,6 @@ jobs:
       - run: "npm ci"
       - uses: "docker/setup-qemu-action@v3"
       - uses: "docker/setup-buildx-action@v3"
-      - uses: "docker/login-action@v3"
-        with:
-          registry: "ghcr.io"
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
       - uses: "sigstore/cosign-installer@v3"
       - uses: "anchore/sbom-action/download-syft@v0"
       - uses: "goreleaser/goreleaser-action@v6"
@@ -42,23 +37,9 @@ jobs:
           args: "release --clean --snapshot"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  trivy-scan:
-    name: "trivy-scan"
-    needs:
-      - "release-snapshot"
-    runs-on: "ubuntu-22.04"
-    # Only run security scan for main branch (not for PR snapshots since they aren't pushed)
-    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
-    permissions:
-      contents: "read"
-      packages: "read"
-    env:
-      TRIVY_DISABLE_VEX_NOTICE: true
-    steps:
       - uses: "aquasecurity/trivy-action@0.28.0"
         with:
-          image-ref: "ghcr.io/getprobo/probo:latest"
+          image-ref: "ghcr.io/getprobo/probo:v0.46.2-amd64"
           format: "table"
           exit-code: 1
           ignore-unfixed: true