feat(java): use trivy-java-db to get GAV

[DmitriyLewen]

Description

Use trivy-java-db to get GAV

Related issues

• Close Build Java database to eliminate dependency on external APIs #3427
• Close trivy image scan suddenly timing out #3421

Related PRs

• feat: add parse maven repository and save to sqlite db trivy-java-db#1
• feat(java): add support trivy-java-db for jars go-dep-parser#167

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).

[dheeg]

@DmitriyLewen Would it be possible to download the Java DB as well, if the already present parameter --download-db-only is used? We use this parameter to build a daily image and therefor to only download once, but execute thousands of times.

[DmitriyLewen]

Hello @dheeg
Thanks! it is good idea.

We add download-java-db-only flag.

[cpach]

This is awesome. Great job @knqyf263 and @DmitriyLewen! Are you planning on making a Trivy release soon?

[knqyf263]

It's out now.
#3518

[knqyf263]

v0.37.0 has a critical issue. Please try v0.37.1.