From 081d49b29b6f10b3cb66b68c2a18c4a653abece3 Mon Sep 17 00:00:00 2001
From: "renovate-bot-updater[bot]"
 <350416368+renovate-bot-updater[bot]@users.noreply.github.com>
Date: Mon, 9 Nov 2026 15:22:13 +0000
Subject: [PATCH] chore(deps): update anchore/grype docker tag to v0.121.3

---
 scripts/vuln-scan.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/vuln-scan.sh b/scripts/vuln-scan.sh
index 1e450c8..be529a4 100755
--- a/scripts/vuln-scan.sh
+++ b/scripts/vuln-scan.sh
@@ -15,7 +15,7 @@ image="$1"
 out="$(mkdir -p "$2" && cd "$2" && pwd)"
 
 # Pinned by digest; Renovate updates it (renovate.json)
-GRYPE_IMAGE="${GRYPE_IMAGE:-anchore/grype:v0.121.2@sha256:6a36234da13f9faa327306ac0b3dab3405cfa2b4eb20c8f904125a8707863913}"
+GRYPE_IMAGE="${GRYPE_IMAGE:-anchore/grype:v0.121.3@sha256:13113eeceab017260370cf540e1d25442c59665fd07d1b09b66d63bb0c282887}"
 
 docker run --rm -v /var/run/docker.sock:/var/run/docker.sock "$GRYPE_IMAGE" \
   "docker:$image" -o json -q > "$out/grype.json"