fix: resolve scheduled build failure, Trivy scan scope, and CSS path

Add permissions block to scheduled-build.yml granting actions: read,
contents: write, and security-events: write. The repository default
workflow permissions are read-only, which prevented the reusable
build.yml from starting.

Add maven2 to Trivy skip-dirs. The maven2/ directory is a transient
checkout of the artifact repository used only during deployment and
should be scanned in the maven2 repository instead.

Inline custom CSS directly in site.xml instead of referencing an
external ./css/custom.css file. The relative path resolved incorrectly
for pages in subdirectories (e.g., guides/architecture.html looked for
guides/css/custom.css which didn't exist).

Author: david-waltermire

.github/workflows/build.yml

@@ -210,6 +210,8 @@ jobs:
         format: 'sarif'
         output: 'trivy-results.sarif'
         severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'
+        # Exclude maven2 artifact repo checkout (has its own security scanning)
+        skip-dirs: 'maven2'
     - name: Trivy Summary
       if: ${{ !inputs.skip_code_scans }}
       run: |

.github/workflows/scheduled-build.yml

@@ -4,6 +4,10 @@ on:
     # Nightly build at 4:00 AM UTC (after liboscal-java)
     - cron: '0 4 * * *'
   workflow_dispatch:
+permissions:
+  actions: read
+  contents: write
+  security-events: write
 jobs:
   nightly:
     uses: ./.github/workflows/build.yml

src/site/resources/css/custom.css

@@ -37,7 +37,31 @@
       <meta http-equiv="X-UA-Compatible" content="IE=edge" />
       <meta http-equiv="Content-Type" content="text/html; charset=${outputEncoding}" />
       <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.12.1/css/all.css" crossorigin="anonymous" />
-      <link rel="stylesheet" href="./css/custom.css" />
+      <style>
+        a.externalLink[href^=https],a.externalLink[href^=http] {
+          background: none;
+          padding-right: 0;
+        }
+        a.externalLink[href^=https]::after,a.externalLink[href^=http]::after {
+          font-family: 'Font Awesome 5 Free';
+          display: inline-block;
+          content: "\f35d";
+          font-size: .5rem;
+          font-weight: 900;
+          margin-left: 3px;
+        }
+        footer {
+          text-align: center;
+          padding-bottom: 10px;
+        }
+        code {
+          color: #5f879b;
+        }
+        /* Fix table header alignment - flexmark doesn't apply alignment to th cells */
+        .table th, table th {
+          text-align: left !important;
+        }
+      </style>
     ]]>
 		</head>