Upload trivy scan results to GitHub security tab

Signed-off-by: Bryan Frimin <bryan@getprobo.com>

.github/workflows/make.yaml

@@ -15,6 +15,7 @@ jobs:
       contents: "read"
       packages: "write"
       id-token: "write"
+      security-events: "write"
     steps:
       - uses: "actions/checkout@v4"
         with:
@@ -40,11 +41,16 @@ jobs:
       - uses: "aquasecurity/trivy-action@0.28.0"
         with:
           image-ref: "ghcr.io/getprobo/probo:latest-amd64"
-          format: "table"
+          format: "sarif"
+          output: "trivy-results.sarif"
           exit-code: 1
           ignore-unfixed: true
           vuln-type: "os,library"
           severity: "CRITICAL,HIGH"
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: 'trivy-results.sarif'
 
   test:
     name: "test"