ci(trivy): pin Trivy 0.70.0 + curl -f

.forgejo/workflows/trivy.yml

@@ -11,7 +11,7 @@ on:
       - ".gitmodules"
 
 env:
-  TRIVY_VERSION: "0.59.1"
+  TRIVY_VERSION: "0.70.0"
 
 jobs:
   config-and-image-scan:
@@ -24,8 +24,9 @@ jobs:
 
       - name: install trivy
         run: |
-          curl -sSL "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" \
-            | tar -xz -C /usr/local/bin trivy
+          curl -fsSL "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" \
+            -o /tmp/trivy.tgz
+          tar -xzf /tmp/trivy.tgz -C /usr/local/bin trivy
           trivy --version
 
       - name: scan workflow files for misconfig