[UpdateCLI] Only bump trivy on the minor release

[dereknola]

Proposed Changes

• Reduce the frequency of trivy bump (the internal image inside the build, not the GHA version). Only bump on the minors, not patches. We should possibly consider removing this in the future as we have better exposure to trivy scans in other CI areas now.

Types of Changes

Verification

Testing

Linked Issues

User-Facing Change

Further Comments

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 46.78%. Comparing base (04ed6c0) to head (67b8314).
Report is 6 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #11773      +/-   ##
==========================================
- Coverage   47.58%   46.78%   -0.80%     
==========================================
  Files         206      206              
  Lines       19483    19519      +36     
==========================================
- Hits         9271     9132     -139     
- Misses       8829     9062     +233     
+ Partials     1383     1325      -58     

Flag	Coverage Δ
e2etests	40.36% <ø> (-0.93%)	⬇️
inttests	34.99% <ø> (+0.02%)	⬆️
unittests	16.43% <ø> (+0.14%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.