In Trivy v0.37.0 the --security-checks arguments is renamed to --scanners https://github.com/aquasecurity/trivy/releases/tag/v0.37.0

Trivy Action 0.9.1 gives

WARN	'--security-checks' is deprecated. Use '--scanners' instead.