main
refactor(vuln): add OS.Supplier field and unify supplier terminology (#11007)
fix(vuln): fall back to UNKNOWN severity when vulnerability details are missing (#10795)
fix: forward ospkg detector options through ospkg.NewScanner (#10811)
refactor: rename scanner to service (#8584)
test: migrate private test helpers to `export_test.go` convention (#10043)
feat(server): include server version info in JSON output for client/server mode (#10075)
feat(report): add Trivy version to JSON output (#10065)