Ci/trivy

[tom-rm-meyer-ISST]

Description

Bumps versions of transitive dependencies in backend to fix security vulnerabilities:

• keycloak-core to 26.3.2
• keycloak-server-spi-private to 26.3.2
• bcprov-jdk18on to 3.18.0
• commons-lang3 to 3.18
• tomcat to 10.1.43

Adapt trivy ci:

• to upload sarif file also in case critical / high vulnerabilities have be detected.
• bump version of trivy-action to 0.32.0

Pre-review checks

Please ensure to do as many of the following checks as possible, before asking for committer review:

• DEPENDENCIES are up-to-date. Dash license tool. Committers can open IP issues for restricted libs.
• Copyright and license header are present on all affected files
• If helm chart has been changed, the chart version has been bumped to either next major, minor or patch level (compared to released chart).