doc: 更新README,补齐部署指南关键步骤示意图

.github/workflows/security.yml

@@ -97,11 +97,13 @@ jobs:
       - name: Container Security Scan (Trivy)
         if: steps.check_docker.outputs.exists == 'true'
         continue-on-error: true
-        run: |
-          VERSION="0.56.1"
-          echo "Installing Trivy $VERSION..."
-          curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin "v$VERSION"
-          trivy config . --format json --output trivy_result.json --severity CRITICAL,HIGH || true
+        uses: aquasecurity/trivy-action@0.20.0
+        with:
+          scan-type: config
+          scan-ref: .
+          format: json
+          output: trivy_result.json
+          severity: CRITICAL,HIGH
 
       - name: Generate Security Report
         if: always()