docs: add golang support (#962)

docs/comparison.md

@@ -2,7 +2,7 @@
 
 | Scanner        | OS<br>Packages  | Application<br>Dependencies | Easy to use  | Accuracy    | Suitable<br>for CI  |
 | -------------- | :-------------: | :-------------------------: | :----------: | :---------: | :-----------------: |
-| Trivy          |       ✅        |       ✅<br>(7 languages)   |    ⭐ ⭐ ⭐    |  ⭐ ⭐ ⭐    |      ⭐ ⭐ ⭐         |
+| Trivy          |       ✅        |       ✅<br>(8 languages)   |    ⭐ ⭐ ⭐    |  ⭐ ⭐ ⭐    |      ⭐ ⭐ ⭐         |
 | Clair          |       ✅        |              ×              |      ⭐       |   ⭐ ⭐      |      ⭐ ⭐           |
 | Anchore Engine |       ✅        |       ✅<br>(4 languages)   |     ⭐ ⭐      |   ⭐ ⭐      |     ⭐ ⭐ ⭐         |
 | Quay           |       ✅        |              ×              |    ⭐ ⭐ ⭐    |   ⭐ ⭐      |        ×            |

docs/faq.md

@@ -1,5 +1,9 @@
 # FAQ
 
+## Scan
+### analyze error: timeout: context deadline exceeded
+Your scan may time out. Java takes a particularly long time to scan. Try increasing the value of the ---timeout option such as `--timeout 15m`.
+
 ## Homebrew
 ### Error: Your macOS keychain GitHub credentials do not have sufficient scope!
 

docs/index.md

@@ -32,7 +32,7 @@ See [here](./integrations/index.md) for details.
 
 - Detect comprehensive vulnerabilities
     - OS packages (Alpine, **Red Hat Universal Base Image**, Red Hat Enterprise Linux, CentOS, Oracle Linux, Debian, Ubuntu, Amazon Linux, openSUSE Leap, SUSE Enterprise Linux, Photon OS and Distroless)
-    - **Application dependencies** (Bundler, Composer, Pipenv, Poetry, npm, yarn, Cargo, NuGet, and Maven)
+    - **Application dependencies** (Bundler, Composer, Pipenv, Poetry, npm, yarn, Cargo, NuGet, Maven, and Go)
 - Simple
     - Specify only an image name or artifact name
     - See [Quick Start](quickstart.md) and [Examples](examples/index.md)

docs/vuln-detection/data-source.md

@@ -18,3 +18,6 @@
     - https://github.com/advisories?query=ecosystem%3Anuget
 - Java
     - https://github.com/advisories?query=ecosystem%3Amaven
+    - https://gitlab.com/gitlab-org/advisories-community
+- Go
+    - https://gitlab.com/gitlab-org/advisories-community

docs/vuln-detection/library.md

@@ -18,6 +18,8 @@
     - packages.lock.json
 - Java
     - JAR/WAR/EAR files (*.jar, *.war, and *.ear)
+- Go
+    - Binaries built by Go
 
 The path of these files does not matter.