Description

The JSON output should include local database version information (vulnerability DB, Java DB, check bundle metadata) regardless of whether running in standalone or client/server mode.

This complements #10074 (server version info) and addresses the full request from the original discussion.

Expected Behavior

The JSON output should include:

{
  "Trivy": {
    "Version": "0.50.0",
    "VulnerabilityDB": {
      "Version": 2,
      "UpdatedAt": "2024-01-01T00:00:00Z",
      "NextUpdate": "2024-01-02T00:00:00Z",
      "DownloadedAt": "2024-01-01T12:00:00Z"
    },
    "JavaDB": { ... },
    "CheckBundle": { ... }
  }
}

This information is important for:

• Assessment teams to verify scans are performed with current vulnerability databases
• Compliance scans requiring up-to-date databases
• Organizations tracking database freshness for monthly scan requirements

Related Discussion

#9400

Related Issues

• Include server version information in JSON output for client/server mode #10074 (server version info for client/server mode)