Prevent cache corruption and .trivyignore.yaml support

• add require_serial: true to prevent cache corruption
• autodetect .trivyignore and .trivyignore.yaml

Using ionice to limit Trivy’s CPU usage

Fixes a bug where some Linux users experienced high CPU consumption.

Trivy Config

A pre-commit hook to enable trivy config.

.pre-commit-config.yaml

  - repo: https://github.com/jonny-wg2/pre-commit-sast
    rev: v0.0.1
    hooks:
      - id: trivyconfig
        args:
          - "--args=--severity HIGH,CRITICAL"
          - "--args=--ignorefile .trivyignore"