Test trivy with cache.

.gitea/workflows/release.yml

@@ -50,18 +50,8 @@ jobs:
           ACTIONS_RUNTIME_TOKEN: ''
         with:
           outputs: type=docker,dest=/tmp/startup.tar
+          cache-to: local,src=/tmp
 
-      - name: Upload artifact
-        uses: actions/upload-artifact@v3
-        with:
-          name: startup.tar
-          path: /tmp/startup.tar
-
-      - name: Download artifact
-        uses: actions/download-artifact@v3
-        with:
-          name: startup
-          path: /tmp
 
       - name: Check with trivy
         uses: aquasecurity/trivy-action@master
@@ -70,3 +60,4 @@ jobs:
           scan-type: 'fs'
           format: 'table'
           vuln-type: 'os,library'
+          cache-from: local,src=/tmp