ID-4867: Trust på nytt metadata-cert for Norge i demoland i TEST (#40)

Generert frå eigen CA med korrekt keyusage og utan critical=no på denne
(ugydig ihht til RFC)

.github/workflows/call-maventests.yml

@@ -21,9 +21,13 @@ jobs:
         with:
           image: ${{ env.IMAGE_NAME}}:${{env.IMAGETAG}}
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # pin@v0.19.0
+        uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # pin@v0.28.0
+        id: trivy-primary
+        env:
+          TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db:2,public.ecr.aws/aquasecurity/trivy-db:2
+          TRIVY_JAVA_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-java-db:1,public.ecr.aws/aquasecurity/trivy-java-db:1
         with:
-          image-ref: ${{ env.IMAGE_NAME}}:${{env.IMAGETAG}}
-          exit-code: '1'
-          severity: 'CRITICAL,HIGH'
+          image-ref: "${{ env.IMAGE_NAME}}:${{env.IMAGETAG}}"
+          exit-code: "1"
+          severity: "CRITICAL,HIGH"
 

.trivyignore

@@ -20,3 +20,4 @@ CVE-2016-1000027 #spring-web fixed in 6.0.0
 CVE-2024-22243 #spring-web fixed in 6.1.4, 6.0.17, 5.3.32
 CVE-2024-22259 #spring-web fixed in 6.1.5, 6.0.18, 5.3.33
 CVE-2024-22262 #spring-web fixed in 5.3.34, 6.0.19, 6.1.6
+CVE-2024-47554 #commons-io fixed in 2.14.0