[LOTP] Add trivy

[fproulx-boostsecurity]

Description of the LOTP tool

trivy is SCA tool that can be configured we a config file.

Configuration files

trivy.yaml

There is a template option which could control the reporting and allow arbitrary Go text template which has a call function.