ci: Various Linux container and PyPi release improvements (#16)

* ci: release workflow fixes

* docs: Fix env var names

* docs: Improve Docker network configuration

* ci: Improve error checking in Docker release workflow

* ci: improve release workflow and container security

* ci: badges and better container scanning

* ci: Addition fixes

* ci: fix pypi release logic

.pre-commit-config.yaml

@@ -221,6 +221,21 @@ repos:
       - id: hadolint-docker
         name: hadolint (Dockerfile linter)
 
+  # ==========================================================================
+  # Dockerfile Security Scanning (Misconfigurations)
+  # ==========================================================================
+  - repo: https://github.com/mxab/pre-commit-trivy.git
+    rev: v0.16.0
+    hooks:
+      - id: trivyconfig-docker
+        name: trivy (Dockerfile misconfig)
+        args:
+          - --severity
+          - HIGH,CRITICAL
+          - --exit-code
+          - "1"
+          - .
+
   # ==========================================================================
   # Commit Message Linting
   # ==========================================================================
@@ -238,6 +253,7 @@ ci:
   autoupdate_schedule: monthly
   autoupdate_commit_msg: "chore(deps): update pre-commit hooks"
   skip:
-    - mypy             # Needs dependencies installed
-    - hadolint-docker  # Needs Docker
-    - trufflehog       # Can be slow in CI
+    - mypy              # Needs dependencies installed
+    - hadolint-docker   # Needs Docker
+    - trivyconfig-docker  # Needs Docker
+    - trufflehog        # Can be slow in CI