- Pin Trivy installation to v0.57.1 with checksum verification instead
of the insecure curl-pipe-sh install pattern
- Fix BDD step context initialization: load workflow_content in the
Background step so scenarios 17/24/31 no longer error with AttributeError
- Fix ruff format violations in step definitions
- Add Robot Framework integration test verifying CI scan configuration
- Add CHANGELOG entry for issue #1927
ISSUES CLOSED: #1927