ci: broaden Trivy scan to cover MEDIUM severity vulnerabilities

- Expand Trivy scan to include MEDIUM severity vulnerabilities in both Docker and source code workflows

Signed-off-by: appleboy <[email protected]>

Author: appleboy

.github/workflows/docker.yml

@@ -80,7 +80,7 @@ jobs:
           ignore-unfixed: true
           format: "sarif"
           output: "trivy-docker-results.sarif"
-          severity: "CRITICAL,HIGH"
+          severity: "CRITICAL,HIGH,MEDIUM"
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3

.github/workflows/security.yml

@@ -34,7 +34,7 @@ jobs:
           ignore-unfixed: true
           format: "sarif"
           output: "trivy-source-results.sarif"
-          severity: "CRITICAL,HIGH"
+          severity: "CRITICAL,HIGH,MEDIUM"
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3