chore: import upstream snapshot with attribution

.github/workflows/trivy-scan-openmetadata-server.yml

@@ -0,0 +1,56 @@
+name: Trivy Scan For OpenMetadata Server Docker Image
+
+on:
+  workflow_dispatch:
+
+concurrency: 
+  group: trivy-server-scan-${{ github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  build-and-scan:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Prepare for Docker Build
+        id: prepare
+        uses: ./.github/actions/prepare-for-docker-build
+        with:
+          image: openmetadata-server
+          tag: trivy
+          is_ingestion: false
+
+      - name: Build Docker Image
+        run: |
+          docker build -t openmetadata-server:trivy -f docker/development/Dockerfile .
+      - name: Run Trivy Image Scan
+        uses: aquasecurity/trivy-action@0.35.0
+        with:
+          scan-type: "image"
+          image-ref: openmetadata-server:trivy
+          hide-progress: true
+          ignore-unfixed: true
+          severity: "HIGH,CRITICAL,MEDIUM"
+          format: "table"
+          output: trivy.txt
+        env:
+          TRIVY_DISABLE_VEX_NOTICE: "true"
+
+      - name: Publish Trivy Output to Summary
+        run: |
+          if [[ -s trivy.txt ]]; then
+            {
+              echo "###  Trivy Security Scan Results"
+              echo "<details><summary>Click to expand</summary>"
+              echo ""
+              echo '```text'
+              cat trivy.txt
+              echo '```'
+              echo "</details>"
+            } >> $GITHUB_STEP_SUMMARY
+          else
+            echo "No vulnerabilities found." >> $GITHUB_STEP_SUMMARY
+          fi