on:
   push:
     branches:
-      - master
+      - main
   pull_request:

+BASE_IMAGE_TESTS=$(echo "$ORIGINAL_MATRIX" | jq -c '
+    map(select(.name == "base")) | 
+    if length > 0 then
+        .[0] as $base | 
+        [
+            ($base | .name = "vllm-distributed" | . + {"image-name": "base"})
+            # example to add new case
+            # ($base | .name = "test2" | . + {"image-name": "base"})
+        ]
+    else
+        []
+    end
+')
 
-

 - name: Install Azure CLI latest
   run: |
         if ! which az > /dev/null; then
             echo "Azure CLI not found. Installing..."
-            curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
+            curl -sL https://packages.microsoft.com/config/ubuntu/$(lsb_release -rs)/packages-microsoft-prod.deb -o packages-microsoft-prod.deb
+            sudo dpkg -i packages-microsoft-prod.deb
+            sudo apt-get update
+            sudo apt-get install -y azure-cli=2.55.0-1~$(lsb_release -cs)
         else
             echo "Azure CLI already installed."
         fi

 - name: Scan ${{ steps.get-registry.outputs.registry_repository }}/${{ env.IMAGE_NAME }}:${{ env.IMG_TAG }}
-  uses: aquasecurity/trivy-action@master
+  uses: aquasecurity/trivy-action@v0.45.0
   with:
     image-ref: ${{ steps.get-registry.outputs.registry_repository }}/${{ env.IMAGE_NAME }}:${{ env.IMG_TAG }}
     format: 'table'
     exit-code: '1'
     ignore-unfixed: true
     vuln-type: 'os,library'
     severity: 'CRITICAL,HIGH'
     timeout: '5m0s'