ossf/scorecard vulnerabilities fix tracking issue

[developer-guy]

What would you like to be added:

We recently ran the ossf/scorecard¹ over the Grype project, found some vulnerabilities, here is the output of the scan:

$ docker run -e GITHUB_AUTH_TOKEN=$GITHUB_TOKEN gcr.io/openssf/scorecard:stable --repo https://github.com/developer-guy/grype

Why is this needed:

To make Grype more secure.

Additional context:

cc: @wagoodman @luhring @Dentrax

Footnotes

1. https://github.com/ossf/scorecard ↩

[kzantow]

We have since added scorecard and have individual issues to address the lower scores, so I'm going to close this one. Please reopen if you deem it necessary!