run coverage not in master branch; always run trivy

Merge request reports

Loading