Because the last commit is 3 years ago.
I did a fork for my own usage (which uses a new Trivy version and also supports another repositories for the vuln db, which solves aquasecurity/trivy#7699 for Bitbucket): https://github.com/wollomatic/trivy-pipe
But I would really prefer a more official image. I'd contribute if appreciated.
