Bump aquasecurity/trivy-action from 0.24.0 to 0.28.0

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.24.0 to 0.28.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@0.24.0...0.28.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/security.yml

@@ -15,29 +15,29 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: PHP-FPM - Latest - Trivy Scan - Unknown, Low, Medium and High Severity
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           image-ref: ${{ env.PHPFPM_BOOKWORM }}:latest
           severity: UNKNOWN,LOW,MEDIUM,HIGH
           exit-code: 0
 
       - name: PHP-FPM - Latest - Trivy Scan - Critical Severity
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           image-ref: ${{ env.PHPFPM_BOOKWORM }}:latest
           ignore-unfixed: true
           severity: CRITICAL
           exit-code: 1
 
       - name: PHP-FPM FFmpeg - Latest - Trivy Scan - Unknown, Low, Medium and High Severity
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           image-ref: ${{ env.PHPFPM_BOOKWORM_FFMPEG }}:latest
           severity: UNKNOWN,LOW,MEDIUM,HIGH
           exit-code: 0
 
       - name: PHP-FPM FFmpeg - Latest - Trivy Scan - Critical Severity
-        uses: aquasecurity/trivy-action@0.24.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           image-ref: ${{ env.PHPFPM_BOOKWORM_FFMPEG }}:latest
           ignore-unfixed: true