This action uses an older version of trivy: https://github.com/aquasecurity/trivy-action/blob/master/Dockerfile#L1 Can the action be updated to use the latest version (v0.49.0 at time of writing)?