Trivy vs Syft vs Dependency-Track vs Anchore vs Mend: SBOM accuracy, SPDX vs CycloneDX, VEX support, and the right tool …