trivy filesystem --offline-scan

Do not issue API requests to identify dependencies [$TRIVY_OFFLINE_SCAN]