chore: bump aquasecurity/trivy-action from 0.11.2 to 0.17.0 #630

	name: create_release
	on:
	workflow_dispatch:
	pull_request:
	branches:
	- main
	- release-**
	types: [closed]

	permissions:
	contents: write

	jobs:
	create-release:
	if: github.event.pull_request.merged == true && contains(github.event.pull_request.title, 'update manifest and helm charts')
	runs-on: ubuntu-20.04
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
	with:
	egress-policy: audit

	- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
	with:
	submodules: true
	fetch-depth: 0
	- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
	with:
	go-version: "1.21"
	check-latest: true
	- id: get-tag
	name: Get tag
	run: echo "tag=$(echo ${{ github.event.pull_request.head.ref }} \| sed -e 's/release-//g')" >> $GITHUB_OUTPUT
	- name: Create tag
	run: \|
	git tag ${{ steps.get-tag.outputs.tag }}
	- name: Goreleaser
	uses: goreleaser/goreleaser-action@336e29918d653399e599bfca99fadc1d7ffbc9f7 # v4.3.0
	with:
	version: latest
	args: release --rm-dist --timeout 150m --debug
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback