Draft: Test trivy os packages fix

What does this MR do?

Testing the fix for Non OS packages are present in the CycloneDX SB... (gitlab-org/gitlab#435390 - closed) • Yasha Rise • 17.1. No need to merge this!

Why are we doing this?

What are the relevant issue numbers?