Security scan for vulnerability in build process

[kaleocheng]

It's a good checkpoint to do a security scan for any CVE- vulnerability. e.g. node audit in the build time and cancel the build for any high severity vulnerability

[kaleocheng]

as we are uisng trivy now and it supports the vulnerability scan as well. @guinan34 I think you can work on this to support the vulnerability scan.