chore(ci): add missing .json to image-ref in trivy-scan workflow

.github/workflows/trivy-scan.yaml

@@ -78,7 +78,7 @@ jobs:
       - name: Convert trivy results to cosign-vuln
         uses: aquasecurity/[email protected]
         with:
-          image-ref: ${{ inputs.image-ref }}
+          image-ref: ${{ inputs.image-ref }}.json
           scan-type: "convert"
           format: "cosign-vuln"
           # skip --vuln-type arg