Trivy vulnerabilities Findings

[shanice-skylight]

Related Issue

• Why is this being done? Link to issue, or a few sentences describing why this PR exists

Changes Proposed

• Detailed explanation of what this PR should do

Additional Information

• decisions that were made
• notice of future work that needs to be done

Testing

• How should reviewers verify this PR?

Checklist for Primary Reviewer

Infrastructure

• Consult the results of the terraform-plan job inside the "Terraform Checks" workflow run for this PR. Confirm that there are no unexpected changes!

Security

• Changes with security implications have been approved by a security engineer (changes to authentication, encryption, handling of PII, etc.)
• Any dependencies introduced have been vetted and discussed

Cloud

• Oncall has been notified if this change is going in after-hours
• If there are changes that cannot be tested locally, this has been deployed to our Azure dev environment for verification.