fix: default docker pipeline grype job to only fail on fixable vulnerabilities

  entrypoint: [""]

grype:

  # this job will fail only for vulnerabilities where there is an update available

  # users can whitelist vulnerabilities with a grype.yaml file

  # https://github.com/anchore/grype#specifying-matches-to-ignore

  before_script:

    - export GRYPE_IMAGE="${KANIKO_REGISTRY_IMAGE}:${KANIKO_DEV_TAG}"

  allow_failure: true

  variables:

    GRYPE_EXTRA_ARGS: "--only-fixed"

    GRYPE_FAIL_ON: "low"