* add security-scan

* updating the alpine version

* clean up

* update the alpine version to be more prescriptive