Consume bitnami vulnerability data

[westonsteimel]

What would you like to be added:
Bitnami has started publishing vulnerability data for their products directly to https://github.com/bitnami/vulndb following the OSV format. Because they also include spdx sboms in their images, it might make sense to make use of the identifiers in those sboms to get much more accurate vulnerability matches for bitnami products.

Trivy is currently making use of this dataset