[Tool] Trivy Pipeline

Signed-off-by: AndyZiYe <[email protected]>

Author: andyziye

.github/workflows/.trivy.yaml

@@ -31,4 +31,6 @@ list-all-pkgs: false
 
 # Same as '--exit-code'
 # Zero as we are only reporting for now, not enforcing
-exit-code: 0
+exit-code: 0
+
+timeout: 30m

.github/workflows/trivy-pipeline.yml

@@ -34,4 +34,3 @@ jobs:
           image-ref: "registry.cn-zhangjiakou.aliyuncs.com/starrocks/dev-env-centos7:3.1-latest"
           scan-type: "image"
           trivy-config: ".trivy.yaml"
-          timeout: "30m"