chore(deps): bump github.com/aquasecurity/trivy from 0.49.1 to 0.50.1 (#1885)

* chore(deps): bump github.com/aquasecurity/trivy from 0.49.1 to 0.50.1

Bumps [github.com/aquasecurity/trivy](https://github.com/aquasecurity/trivy) from 0.49.1 to 0.50.1.
- [Release notes](https://github.com/aquasecurity/trivy/releases)
- [Changelog](https://github.com/aquasecurity/trivy/blob/main/goreleaser.yml)
- [Commits](https://github.com/aquasecurity/trivy/compare/v0.49.1...v0.50.1)

---
updated-dependencies:
- dependency-name: github.com/aquasecurity/trivy
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* refactor(cmd/report): use trivy default for trivy-java-db-repository default value

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com>

scanner/base.go

@@ -15,9 +15,9 @@ import (
 	"sync"
 	"time"
 
-	dio "github.com/aquasecurity/go-dep-parser/pkg/io"
 	fanal "github.com/aquasecurity/trivy/pkg/fanal/analyzer"
 	tlog "github.com/aquasecurity/trivy/pkg/log"
+	xio "github.com/aquasecurity/trivy/pkg/x/io"
 	debver "github.com/knqyf263/go-deb-version"
 
 	"github.com/future-architect/vuls/config"
@@ -764,7 +764,7 @@ func AnalyzeLibrary(ctx context.Context, path string, contents []byte, filemode
 		"",
 		path,
 		info,
-		func() (dio.ReadSeekCloserAt, error) { return dio.NopCloser(bytes.NewReader(contents)), nil },
+		func() (xio.ReadSeekCloserAt, error) { return xio.NopCloser(bytes.NewReader(contents)), nil },
 		nil,
 		opts,
 	); err != nil {
@@ -784,7 +784,7 @@ func AnalyzeLibrary(ctx context.Context, path string, contents []byte, filemode
 
 	analyzerTypes := ag.RequiredPostAnalyzers(path, info)
 	if len(analyzerTypes) != 0 {
-		opener := func() (dio.ReadSeekCloserAt, error) { return dio.NopCloser(bytes.NewReader(contents)), nil }
+		opener := func() (xio.ReadSeekCloserAt, error) { return xio.NopCloser(bytes.NewReader(contents)), nil }
 		tmpFilePath, err := composite.CopyFileToTemp(opener, info)
 		if err != nil {
 			return nil, xerrors.Errorf("Failed to copy file to temp. err: %w", err)
@@ -858,7 +858,8 @@ var disabledAnalyzers = []fanal.Type{
 	fanal.TypeHelm,
 	fanal.TypeKubernetes,
 	fanal.TypeTerraform,
-	fanal.TypeTerraformPlan,
+	fanal.TypeTerraformPlanJSON,
+	fanal.TypeTerraformPlanSnapshot,
 
 	// ========
 	// License

scanner/trivy/jar/jar.go

@@ -9,10 +9,10 @@ import (
 
 	"golang.org/x/xerrors"
 
-	dio "github.com/aquasecurity/go-dep-parser/pkg/io"
 	"github.com/aquasecurity/trivy/pkg/fanal/analyzer"
 	"github.com/aquasecurity/trivy/pkg/fanal/types"
 	"github.com/aquasecurity/trivy/pkg/parallel"
+	xio "github.com/aquasecurity/trivy/pkg/x/io"
 )
 
 func init() {
@@ -41,7 +41,7 @@ func newJavaLibraryAnalyzer(options analyzer.AnalyzerOptions) (analyzer.PostAnal
 
 func (a *javaLibraryAnalyzer) PostAnalyze(ctx context.Context, input analyzer.PostAnalysisInput) (*analyzer.AnalysisResult, error) {
 	// It will be called on each JAR file
-	onFile := func(path string, info fs.FileInfo, r dio.ReadSeekerAt) (*types.Application, error) {
+	onFile := func(path string, info fs.FileInfo, r xio.ReadSeekerAt) (*types.Application, error) {
 		p := newParser(withSize(info.Size()), withFilePath(path))
 		parsedLibs, err := p.parse(r)
 		if err != nil {

scanner/trivy/jar/parse.go

@@ -11,9 +11,9 @@ import (
 	"regexp"
 	"strings"
 
-	dio "github.com/aquasecurity/go-dep-parser/pkg/io"
-	"github.com/aquasecurity/go-dep-parser/pkg/log"
 	"github.com/aquasecurity/trivy/pkg/digest"
+	"github.com/aquasecurity/trivy/pkg/log"
+	xio "github.com/aquasecurity/trivy/pkg/x/io"
 	"github.com/samber/lo"
 	"go.uber.org/zap"
 	"golang.org/x/xerrors"
@@ -87,7 +87,7 @@ func newParser(opts ...option) *parser {
 	return p
 }
 
-func (p *parser) parse(r dio.ReadSeekerAt) ([]jarLibrary, error) {
+func (p *parser) parse(r xio.ReadSeekerAt) ([]jarLibrary, error) {
 	libs, err := p.parseArtifact(p.rootFilePath, p.size, r)
 	if err != nil {
 		return nil, xerrors.Errorf("Failed to parse %s. err: %w", p.rootFilePath, err)
@@ -98,7 +98,7 @@ func (p *parser) parse(r dio.ReadSeekerAt) ([]jarLibrary, error) {
 // This function MUST NOT return empty list unless an error occurred.
 // The least element contains file path and SHA1 digest, they can be used at detect phase to
 // determine actual name and version.
-func (p *parser) parseArtifact(filePath string, size int64, r dio.ReadSeekerAt) ([]jarLibrary, error) {
+func (p *parser) parseArtifact(filePath string, size int64, r xio.ReadSeekerAt) ([]jarLibrary, error) {
 	log.Logger.Debugw("Parsing Java artifacts...", zap.String("file", filePath))
 
 	sha1, err := digest.CalcSHA1(r)