chore verify image vulns

.github/workflows/docker-scan.yml

@@ -1,4 +1,4 @@
-name: Verify image vulnerabilities
+name: Verify image with Snyk
 
 on:
   schedule:
@@ -15,6 +15,8 @@ jobs:
     permissions: write-all
 
     steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with:
@@ -23,6 +25,6 @@ jobs:
           output: "trivy-results.sarif"
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v2
         with:
           sarif_file: "trivy-results.sarif"