build(deps): bump chainguard/static from `939a132` to `d44809c` #619

	name: Container Security Scan
	on:
	push:
	branches:
	- master
	pull_request:
	branches:
	- master
	permissions:
	contents: read

	jobs:
	container-security-scan:
	name: Scan Container for Vulnerabilities
	runs-on: ubuntu-24.04
	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
	with:
	egress-policy: audit

	- name: Checkout repository
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

	- name: Build Docker image for scanning
	run: \|
	docker build -t ghcr.io/permify/permify:scan-${{ github.sha }} .

	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
	with:
	image-ref: 'ghcr.io/permify/permify:scan-${{ github.sha }}'
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH'

Provide feedback