chore(vex): suppress CVE-2024-45338

[knqyf263]

Description

govulncheck confirmed it doesn't affect Trivy.

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).

[DmitriyLewen]

1 small question:
We can fix this vulnerability (see #8140)
But you also want to add this VEX file for users using non-latest version of Trivy so they can suppress this vulnerability, right?

[knqyf263]

But you also want to add this VEX file for users using non-latest version of Trivy so they can suppress this vulnerability, right?

Yes. If a vulnerability doesn't affect Trivy, we should state it in VEX so that users will not worry about it. Otherwise, users will try to bump Trivy in a hurry, but it's unnecessary.