main
feat(vex): native discovery of VEX documents stored as OCI artifacts (#10932)
feat(java): support user-defined Maven mirrors in trivy.yaml (#11006)
fix(repo): return a nil interface for gitAuth if missing (#10097)
feat(image): add Sigstore bundle SBOM support (#9516)
fix: surface the original analysis error instead of context cancellation (#10793)