Add security scanning for docker image

[tungbq]

ref: https://github.com/marketplace/actions/aqua-security-trivy