Including invocation startTime and endTime in SARIF output

[fniessink]

Is it possible to make Trivy write the invocation startTimeUtc and endTimeUtc properties to the SARIF output report?

I haven't been able to find anything about manipulating the contents of the SARIF output unfortunately.

Rationale: we want to monitor that SARIF reports are current.

CC: @Sebastiaan127001