scanner: allow oss.jfrog.org/artifactory/oss-snapshot-local

Please review this for both, correct syntax and actual changes: oss.jfrog.org seems to be to jcenter what sonatype oss is to central?