Update CODEOWNERS and pin down trivy version

[thomasyu888]

No description provided.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[jaymedina]

It still requests us all individually for review instead of a "schematic_developers" group. That's the expected behavior, right?

[BWMac]

@jaymedina I think it will request the group instead for future PRs after this is merged 🤞🏻

[jaymedina]

This commit was made before the review request was made, which I assumed would have a group be the reviewer instead of the individuals (at least in this branch). @BWMac

[thomasyu888]

This commit was made before the review request was made, which I assumed would have a group be the reviewer instead of the individuals (at least in this branch). @BWMac

@jaymedina since the new CODEOWNERS is on a feature branch,it will not take into effect until it's merged