Fix trivy image scanning

.github/workflows/ci.yml

@@ -61,7 +61,7 @@ jobs:
         run: poetry install
 
       - name: Generate SBOM
-        run: poetry run cyclonedx-py poetry > sbom.json
+        run: poetry run cyclonedx-py poetry --without test,dev > sbom.json
 
       - name: Generate licenses file
         run: |
@@ -168,6 +168,13 @@ jobs:
         env:
           DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index
 
+      - name: print metadata
+        run: |
+          echo "tags: ${{ steps.meta.outputs.tags }}"
+          echo "labels: ${{ steps.meta.outputs.labels }}"
+          echo "annotations: ${{ steps.meta.outputs.annotations }}"
+
+
       - name: Build and push Docker image
         uses: docker/build-push-action@v5
         with:
@@ -182,7 +189,7 @@ jobs:
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with:
-          image-ref: ${{ steps.meta.outputs.tags[0] }}
+          image-ref: ${{ steps.meta.outputs.tags }}
           trivy-config: trivy.yaml
           scan-type: image
           exit-code: 0