How that compares to https://trivy.dev, https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck and other tools?