At the moment the Trivy cloud code is in the `pkg/saas` package which isn't a great name, ideally it goes into cloud. To free up the cloud package we should move the contents of cloud to somewhere sensible