Add support for pylock.toml (PEP 751)

[jiridanek]

Description

PEP 751 is a new Python lockfile format. It has been Accepted and the community is rallying to support it.

It would be great if Trivy can support it. It might eventually simplify certain aspects of having to support the universe of pip, piptools, PDM, poetry, uv, hatch, etc.

https://pydevtools.com/handbook/explanation/what-is-pep-751/
https://peps.python.org/pep-0751/

Target

Filesystem

Scanner

Vulnerability

[knqyf263]

Thanks for sharing the information. Just to clarify, while your title is about pyproject.toml, PEP 751 seems to be more about pylock.toml. Am I correct?

[jiridanek]

Fixed the title, thanks.

[knqyf263]

It would definitely be great to add support for pylock.toml. Created #9410