Add trivy scan

[fengshunli]

Ⅰ. Describe what this PR does

Ⅱ. Does this pull request fix one issue?

fixes #XXXX

Ⅲ. List the added test cases (unit test/integration test) if any, please explain if no tests are needed.

Ⅳ. Describe how to verify it

Ⅴ. Special notes for reviews

[fluid-e2e-bot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign trafalgarzzz for approval by writing /assign @trafalgarzzz in a comment. For more information see:The Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[codecov]

Codecov Report

Merging #2713 (e562380) into master (73f1384) will increase coverage by 0.00%.
The diff coverage is n/a.

❗ Current head e562380 differs from pull request most recent head 06439b7. Consider uploading reports for the commit 06439b7 to get more accurate results

@@           Coverage Diff           @@
##           master    #2713   +/-   ##
=======================================
  Coverage   67.55%   67.56%           
=======================================
  Files         381      381           
  Lines       21968    21968           
=======================================
+ Hits        14840    14842    +2     
+ Misses       5381     5380    -1     
+ Partials     1747     1746    -1     

Impacted Files	Coverage Δ
pkg/webhook/certificate_builder.go	84.09% <0.00%> (+4.54%)	⬆️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.