feat(nodejs): Bun support

[knqyf263]

Description

Support bun.lock introduced in Bun v1.1.39
https://bun.sh/blog/bun-lock-text-lockfile

Discussed in #5996

[pathscale]

+1 very interested

[sneaky-potato]

Hi @knqyf263 can I work on this issue?

[knqyf263]

Sure. You need to write a parser first.
https://github.com/aquasecurity/trivy/tree/8995838e8d184ee9178d5b52d2d3fa9b4e403015/pkg/fanal/analyzer/language/nodejs

[sneaky-potato]

Hi @knqyf263, I looked through the code and found parser being used in the analyzer you pointed out, for example yarn
We will require a parser for bun as a requirement for the analyzer, right?

[knqyf263]

Right. I think it's a good idea to open a PR only with a parser implementation to keep the PR small.

[DmitriyLewen]

Added in #8839 + #8840