test: smoke-test python-sbom Grype cutover [DO NOT MERGE]

[williaby]

Temporary smoke test for the issue #152 Trivy-to-Grype cutover (ByronWilliamsCPA/.github#229, merged). Points this repo's SBOM caller at the merged cutover commit 64ad9cf to confirm the gating Grype job reports under the Scan Runtime Dependencies check. Will be closed once the check result is observed; not for merge.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: fd874769-07c2-4715-bdaa-046377007fe9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/sbom-cutover-smoketest

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[williaby]

Smoke test complete: the promoted Grype Scan Runtime Dependencies gating job reported and gated correctly against this real consumer on the merged cutover SHA (ByronWilliamsCPA/.github#229). Closing the throwaway PR; the OSV-Scanner failure here is pre-existing and orthogonal to the cutover. Refs ByronWilliamsCPA/.github#152.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud