Description

$ trivy filesystem --help
...
Package Flags
      --include-dev-deps            include development dependencies in the report (supported: npm, yarn, gradle)
...

The CLI only lists 3 package managers as supporting the --include-dev-deps flag

Link

https://trivy.dev/docs/latest/guide/coverage/language/nodejs/

Suggestions

It seems like many more package managers support the flag. For example, pnpm, bun: https://trivy.dev/docs/latest/guide/coverage/language/nodejs/