update docs

docs/docs/vulnerability-scanning/trivy.md

@@ -101,7 +101,7 @@ EOF
 | `trivy.javaDbRepository`                 | `ghcr.io/aquasecurity/trivy-java-db`      | External OCI Registry to download the vulnerability database for Java                                                                                                                                                                                                                                                                                                                            |
 | `trivy.dbRepositoryInsecure`             | `false`                                   | The Flag to enable insecure connection for downloading trivy-db via proxy (air-gaped env)                                                                                                                                                                                                                                                                                                        |
 | `trivy.mode`                             | `Standalone`                              | Trivy client mode. Either `Standalone` or `ClientServer`. Depending on the active mode other settings might be applicable or required.                                                                                                                                                                                                                                                           |
-| `additionalVulnerabilityReportFields`    | N/A                                       | A comma separated list of additional fields which can be added to the VulnerabilityReport. Possible values: `Description,Links,CVSS,Target,Class,PackagePath,PackageType`. Description will add more data about vulnerability. Links - all the references to a specific vulnerability. CVSS - data about CVSSv2/CVSSv3 scoring and vectors. Target - vulnerable element. Class - OS or library vulnerability |
+| `additionalVulnerabilityReportFields`    | N/A                                       | A comma separated list of additional fields which can be added to the VulnerabilityReport. Possible values: `Description,Links,CVSS,Target,Class,PackagePath,PackageType,SeveritySource,DataSource`. Description will add more data about vulnerability. Links - all the references to a specific vulnerability. CVSS - data about CVSSv2/CVSSv3 scoring and vectors. Target - vulnerable element. Class - OS or library vulnerability |
 | `trivy.command`                          | `image`                                   | command. One of `image`, `filesystem` or `rootfs` scanning. Depending on the target type required for the scan.                                                                                                                                                                                                                                                                                  |
 | `trivy.slow`                             | `true`                                    | This flag is to use less CPU/memory for scanning though it takes more time than normal scanning. It fits small-footprint                                                                                                                                                                                                                                                                         |
 | `trivy.severity`                         | `UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL`        | A comma separated list of severity levels reported by Trivy                                                                                                             |