vulnerability-detection

Currently trivy can find package-lock.json and process it, looking for vulnerabilities. It would be nice if it could process pnpm-lock.yaml files too

Is your feature request related to a problem? Please describe.
Already happened to me that my newest scan replaced the output file of a previous and long scan.

Describe the solution you'd like
I'm not sure which solution is the best:

1. Default mode halting the start of the scan due to a previous output file of size > 0. Asking user to accept overwriting the previous output file.

The current swagger definition is autogenerated. The automatically generated definitions rely on reflection and annotations to create the documentation. The reflection capabilities are poor at best and lead to missing API parameters. Annotations can help in some cases, but the only fix for Swagger is to create individual POJOs for every possible request. This will lead to unnecessary large number

I think that you are doing a very necessary system and your idea is cool, but at the moment it has a lot of bugs. From what I noticed, the assets do not understand the ascii characters and the system crashes. In addition, I did not find a description of the API, I would like to integrate your system into TheHive, or rather make it possible to view information about an asset in TheHive. I believe t