Specify option to scan container images

[zeroalphat]

I want to make it possible to specify arbitrary options that Trivy uses to scan container images. As an example, a security management product "yamory" I use requires package information in a scan result. So, I need to set --list-all-pkgs option when Trivy scans. This feature would help with the integration of various products.

https://yamory.io/ (Japanese site only)

[chen-keinan]

@zeroalphat is adding sbom , #143 , can solve your issue as well ?

[zeroalphat]

I don't think an SBOM would solve this issue, since yamory does not provide a function to retrieve package information from the SBOM.