Add setting up an Instance via the UI instead of GraphQL #1390

	name: Vulnerability Scan
	on:
	pull_request:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref_name }}-${{ github.event.pull_request.number \|\| 'branch' }} # scope to for the current workflow
	cancel-in-progress: ${{ github.event_name == 'pull_request' }} # cancel only PR related jobs

	jobs:
	scan-repo:
	if: ${{ !contains(github.event.commits[0].message, '[skip-ci]') }}
	runs-on: ubuntu-latest
	name: Scan repository for vulnerabilities
	permissions:
	security-events: write
	actions: read
	contents: read
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	- name: Run Trivy vulnerability scanner in repo mode
	uses: aquasecurity/trivy-action@master
	with:
	scan-type: 'fs'
	ignore-unfixed: true
	format: 'sarif'
	output: 'trivy-results.sarif'
	severity: 'CRITICAL'
	- name: Upload Trivy scan results to GitHub Security tab
	uses: github/codeql-action/upload-sarif@v2
	with:
	sarif_file: 'trivy-results.sarif'

Provide feedback