ci(verify): trivy из релизного tarball, версия 0.76.1

Refs #17

.gitea/workflows/ci.yml

@@ -245,13 +245,16 @@ jobs:
     if: needs.lint.outputs.has_dockerfile == 'true'
     runs-on: ubuntu-latest
     env:
-      TRIVY_VERSION: "0.57.1"
+      TRIVY_VERSION: "0.76.1"
       TRIVY_SEVERITY: "HIGH,CRITICAL"
     steps:
       - name: install trivy
         run: |
-          curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh \
-            | sh -s -- -b /usr/local/bin "v${TRIVY_VERSION}"
+          set -euo pipefail
+          curl -fsSL -o /tmp/trivy.tar.gz \
+            "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz"
+          tar -xzf /tmp/trivy.tar.gz -C /usr/local/bin trivy
+          chmod +x /usr/local/bin/trivy
           trivy --version
 
       - name: "trivy image (HIGH/CRITICAL -> fail)"