[Tracking] Repositories requiring trivy-action security update

This is a tracking issue for the security update of `aquasecurity/trivy-action` across Kubernetes organization repositories.

Ref: https://github.com/aquasecurity/trivy/discussions/10425

---

Recommended fix: update all references to use SHA-pinned version:

```
uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
```

---

ref: https://cs.k8s.io/?q=(trivy-action%7Csetup-trivy)%40(v0%7Cmaster)&i=nope&literal=nope&files=.github%2Fworkflows%2F*&excludeFiles=&repos=

Across our 5 Kubernetes orgs (kubernetes, kubernetes-sigs, kubernetes-csi, kubernetes-client, etcd-io), the following repos are using trivy scanner in github action workflows.

Among them, following two already use SHA-pinned trivy-action:

- [x] kubernetes-sigs/cloud-provider-azure
- [x] kubernetes-sigs/cluster-api-operator

And rest of the following need to be updated:

- [x] kubernetes-csi/csi-driver-iscsi - https://github.com/kubernetes-csi/csi-driver-iscsi/pull/398
- [x] kubernetes-csi/csi-driver-nfs - https://github.com/kubernetes-csi/csi-driver-nfs/pull/1075
- [x] kubernetes-csi/csi-driver-smb - https://github.com/kubernetes-csi/csi-driver-smb/pull/1047
- [ ] kubernetes-csi/csi-driver-smb-ghsa-rmg6-rh96-c9wx - https://github.com/kubernetes-csi/csi-driver-smb-ghsa-rmg6-rh96-c9wx/pull/1
- [x] kubernetes-csi/csi-lib-iscsi - https://github.com/kubernetes-csi/csi-lib-iscsi/pull/76
- [x] kubernetes-csi/csi-release-tools - https://github.com/kubernetes-csi/csi-release-tools/pull/295
- [x] kubernetes-csi/external-snapshot-metadata - https://github.com/kubernetes-csi/external-snapshot-metadata/pull/228
- [x] kubernetes-csi/external-snapshotter - https://github.com/kubernetes-csi/external-snapshotter/pull/1402
- [x] kubernetes-csi/livenessprobe - https://github.com/kubernetes-csi/livenessprobe/pull/405
- [x] kubernetes-csi/node-driver-registrar - https://github.com/kubernetes-csi/node-driver-registrar/pull/562
- [x] kubernetes-sigs/aws-ebs-csi-driver - https://github.com/kubernetes-sigs/aws-ebs-csi-driver/pull/2898
- [x] kubernetes-sigs/azuredisk-csi-driver - https://github.com/kubernetes-sigs/azuredisk-csi-driver/pull/3557
- [x] kubernetes-sigs/azurefile-csi-driver - https://github.com/kubernetes-sigs/azurefile-csi-driver/pull/3032
- [x] kubernetes-sigs/azurelustre-csi-driver - https://github.com/kubernetes-sigs/azurelustre-csi-driver/pull/265
- [x] kubernetes-sigs/blob-csi-driver - https://github.com/kubernetes-sigs/blob-csi-driver/pull/2383
- [x] kubernetes-sigs/descheduler - https://github.com/kubernetes-sigs/descheduler/pull/1854
- [x] kubernetes-sigs/hydrophone - https://github.com/kubernetes-sigs/hydrophone/pull/298
- [x] kubernetes-sigs/lws - https://github.com/kubernetes-sigs/lws/pull/785
- [x] kubernetes-sigs/sig-storage-local-static-provisioner - https://github.com/kubernetes-sigs/sig-storage-local-static-provisioner/pull/547

---

- [x] https://github.com/kubernetes-sigs/cloud-provider-azure/pull/10071
- [x] https://github.com/kubernetes-csi/csi-driver-nfs/pull/1076
- [x] https://github.com/kubernetes-csi/csi-driver-smb/pull/1048
- [x] https://github.com/kubernetes-sigs/blob-csi-driver/pull/2384
- [x] https://github.com/kubernetes-sigs/blob-csi-driver/pull/2385
- [x] https://github.com/kubernetes-sigs/azurefile-csi-driver/pull/3033
- [x] https://github.com/kubernetes-sigs/azurefile-csi-driver/pull/3034
- [x] https://github.com/kubernetes-sigs/azurefile-csi-driver/pull/3035
- [x] https://github.com/kubernetes-sigs/azuredisk-csi-driver/pull/3558
- [x] https://github.com/kubernetes-sigs/azuredisk-csi-driver/pull/3559

---

**_Please note_** - below repos need a git submodule update once the respective PR for `release-tools` repo is merged https://github.com/kubernetes-csi/csi-release-tools/pull/295

- [x] kubernetes-csi/csi-driver-iscsi
- [x] kubernetes-csi/csi-driver-nfs
- [x] kubernetes-csi/csi-driver-smb
- [x] kubernetes-csi/csi-lib-iscsi
- [x] kubernetes-csi/external-snapshot-metadata
- [x] kubernetes-csi/external-snapshotter
- [x] kubernetes-csi/livenessprobe
- [x] kubernetes-csi/csi-driver-host-path
- [ ] kubernetes-csi/csi-driver-nvmf
- [x] kubernetes-csi/csi-lib-utils
- [ ] kubernetes-csi/csi-proxy
- [x] kubernetes-csi/csi-test
- [x] kubernetes-csi/external-attacher
- [x] kubernetes-csi/external-health-monitor
- [x] kubernetes-csi/external-provisioner
- [x] kubernetes-csi/external-resizer
- [x] kubernetes-csi/lib-volume-populator
- [x] kubernetes-csi/volume-data-source-validator

Search each remaining repository's .github/workflows/* files for trivy-action or setup-trivy references, using the linked cs.k8s.io search and the unchecked checklist entries as the scope. Update remaining references to the SHA-pinned action shown in the issue, account for the noted csi-release-tools submodule dependency, and verify that the relevant repository pull requests and checklist entries are complete.

Written by the indexing model from the issue text.