Prepare for v0.36.0

[itaysk]

Draft to collaborate on v0.36.0 release announcement

🪟 Trivy for Windows 💻

Trivy is now tested and built on Microsoft Windows. This means you can find trivy.exe in the release artifacts, download and seamlessly run it on your Windows computer. It should support all the common Trivy features, but it's possible some edge cases won't work initially.
Note that this does not mean Trivy scans Windows OS or Windows containers.

🧾 Initial CIS Kubernetes Benchmark ⎈

This release provides a CIS Kubernetes Benchmark report that covers most of the checks. In the next release we will complete the report with "host-level checks" which will bring Trivy on par with kube-bench. You can follow the progress in this Issue: #2198

☁️ AWS CIS Benchmark 1.4 ✔️

Trivy AWS scanning now offers CIS Benchmark 1.4 report in addition to the previously offered CIS Benchmark 1.2

🍏 CocoaPods (Swift/Objective C) 🫘

Trivy can now detect and analyze CocoaPods, Apple ecosystem dependency manager. For now, dependencies are recognized for the purpose of SBOM generation, but not yet for vulnerability detection.

🐺 Wolfi OS 🐾

Trivy now supports scanning Wolfi OS for vulnerabilities.

Thanks @luhring for contributing!

🐧 Ubuntu ESM 🩹

Trivy now accurately detects vulnerabilities from Ubuntu ESM (Canonical's extra security patching for Ubuntu LTS).

🧪 Elixir/Erlang 🥃

Trivy now supports scanning and finding vulnerabilities in Elixir code projects built with Mix tool.

🌲 Dependency tree for Yarn 🧶

The dependency tree feature (--dependency-tree) now supports Javascript Yarn projects as well.