Pass Rancher's VEX report to Trivy to remove known false-positives CVEs

[macedogm]

Proposed Changes

This PR adds VEX scan in the Trivy check. VEX will remove known false-positive CVEs with Rancher's VEX Hub standalone report.

Types of Changes

Trivy workflow change.

Verification

Run the Trivy check in any PR and if there are known false-positives CVEs they will be listed in Trivy's Suppressed Vulnerabilities output.

Testing

Same as above.

Linked Issues

None.

User-Facing Change

None.

Further Comments

None.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 44.12%. Comparing base (cda31eb) to head (3306a0e).
Report is 5 commits behind head on master.

❗ There is a different number of reports uploaded between BASE (cda31eb) and HEAD (3306a0e). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (cda31eb)	HEAD (3306a0e)
e2etests	7	6

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #10956      +/-   ##
==========================================
- Coverage   49.80%   44.12%   -5.68%     
==========================================
  Files         178      178              
  Lines       14801    14801              
==========================================
- Hits         7371     6531     -840     
- Misses       6084     7068     +984     
+ Partials     1346     1202     -144     

Flag	Coverage Δ
e2etests	36.45% <ø> (-9.54%)	⬇️
inttests	36.73% <ø> (ø)
unittests	13.55% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.