Fix Trivy action ref to use v0.36.0 tag prefix.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: zeroman27

.github/workflows/release.yml

@@ -146,7 +146,7 @@ jobs:
           shasum -a 256 "$ARTIFACT_DIR/${NAME}.zip" | tee "$ARTIFACT_DIR/${NAME}.zip.sha256"
 
       - name: Security scan (Trivy on built .app)
-        uses: aquasecurity/trivy-action@0.36.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: fs
           scan-ref: FluffyFlash/build/Build/Products/Release/FluffyFlash.app

.github/workflows/security-semgrep-trivy.yml

@@ -39,7 +39,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Trivy filesystem scan
-        uses: aquasecurity/trivy-action@0.36.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: fs
           scan-ref: .