feat: container add --exclude-node-modules option

[adrobuta]

Pull Request Submission Checklist

• Follows CONTRIBUTING guidelines
• Includes detailed description of changes
• Contains risk assessment (Low | Medium | High)
• Highlights breaking API changes (if applicable)
• Links to automated tests covering new functionality
• Includes manual testing instructions (if necessary)
• Updates relevant GitBook documentation (PR link: ___)

What does this PR do?

Before v6.12.0, the docker cli plugin was able to scan npm projects only when strict package.json and package-lock.json pairs of files were identified within container images. The pair of files had to be outside of a node_modules folder’s context in order to avoid creating projects out of the dependencies. Scanning container images that had the manifests/lockfiles removed was not possible and customer needs were created to remove that constraint.

The scanning of npm global and local scoped node_modules directories has been enabled as a default behavior when a node.js image is scanned.
Adding an option to opt-out from the node_modules scan allows the user to scan npm projects only when [strict package.json and package-lock.json pairs] are identified in the container image, thus re-enabling the original npm scan behavior.

Where should the reviewer start?

How should this be manually tested?

1. Build a docker image with multiple npm projects and global node_modules installed in the image:
   Dockerfile:
   `FROM node:18-alpine

COPY package.json /goof1/
COPY package-lock.json /goof1/
COPY package.json /
COPY package-lock.json /
WORKDIR /goof1
RUN npm install
WORKDIR /
RUN npm install`

docker build -t npm7-image .
2. Run test/monitor without disabling node_modules scan on the nodejs image
SNYK_API=https://app.pre-prod.snyk.io/api/v1 snyk container test npm7-image:latest
Expected Results:
Global node_modules are scanned.
A log line should appear that describes the target scanned:

Target file: /usr/local/lib/node_modules

3. Run test/monitor with --exclude-node-modules option enabled
   SNYK_API=https://app.pre-prod.snyk.io/api/v1 snyk container test npm7-image:latest --exclude-node-modules

Expected Results
Global node_modules are excluded from the scan.

[github-actions]

	Warnings
⚠️	Please make changes to snyk help text in Gitbook. Changes will be automatically synchronised to Snyk CLI as a scheduled PR. For more information, see: help/README.md.
⚠️	"feat: container test/monitor add support for --exclude-node-modules option" is too long. Keep the first line of your commit message under 72 characters.

Generated by 🚫 dangerJS against 4756f27