Evaluate trivy-db as source for vulnerability database

[nscuro]

Current Behavior

We're aiming to build a mechanism to assemble and distribute a vulnerability database tailored to Dependency-Track's needs.

Similar efforts exist already. It would be good to leverage what is already there, rather than reinventing the wheel.

The goals for our own database are defined here: https://docs.google.com/document/d/1DVV4ik7NGOBc6u-fdPlPVKoplNmSpzDT6iC4FJAFYi0/edit?tab=t.0#heading=h.w22q0gsagz1c

Proposed Behavior

Evaluate if and how Trivy's vulnerability database can be leveraged:

• https://github.com/aquasecurity/vuln-list/
• https://github.com/aquasecurity/trivy-db

Checklist

• I have read and understand the contributing guidelines
• I have checked the existing issues for whether this enhancement was already requested