fix: update Grype to more recent image for fixing db updates

[merll]

📌 Summary

This upgrades the Tekton Task for Grype to version 0.112.0. Some additional adjustments were made to run it as a non-root user and simplifying future updates.

🔍 Reviewer Notes

🧹 Checklist

• Code is readable, maintainable, and robust.
• Unit tests added/updated

[svcAPLBot]

Comparison of Helm chart templating output:

# rabbitmq-cluster-operator/templates/messaging-topology-operator/validating-webhook-configuration.yaml

# team-ns/templates/tekton-tasks/grype.yaml

@@ metadata.annotations.tekton.dev/platforms @@
! ± value change
- linux/amd64,linux/arm64,linux/ppc64le,linux/390x
+ linux/amd64

@@ spec @@
! + one map entry added:
+ volumes:
+ - name: cache-dir
+   emptyDir: {}

@@ spec.params.GRYPE_IMAGE.default @@
! ± value change
- docker.io/anchore/grype@sha256:0ca1a530362e8ef2a42bcf3ddcb17e656c7c268d7c6e26729d4bb1a80bbd9fe1
+ docker.io/anchore/grype@sha256:f666817cbac2bee23cc78a433b4e739456ce221438c0c8ac6bdeaf7bc1a73839

@@ spec.steps.grype @@
! + one map entry added:
+ volumeMounts:
+ - name: cache-dir
+   mountPath: /.cache

@@ spec.steps.grype.securityContext @@
! + three map entries added:
+ runAsUser: 65532
+ runAsGroup: 65532
+ runAsNonRoot: true

# team-ns/templates/tekton-tasks/grype.yaml

@@ metadata.annotations.tekton.dev/platforms @@
! ± value change
- linux/amd64,linux/arm64,linux/ppc64le,linux/390x
+ linux/amd64

@@ spec @@
! + one map entry added:
+ volumes:
+ - name: cache-dir
+   emptyDir: {}

@@ spec.params.GRYPE_IMAGE.default @@
! ± value change
- docker.io/anchore/grype@sha256:0ca1a530362e8ef2a42bcf3ddcb17e656c7c268d7c6e26729d4bb1a80bbd9fe1
+ docker.io/anchore/grype@sha256:f666817cbac2bee23cc78a433b4e739456ce221438c0c8ac6bdeaf7bc1a73839

@@ spec.steps.grype @@
! + one map entry added:
+ volumeMounts:
+ - name: cache-dir
+   mountPath: /.cache

@@ spec.steps.grype.securityContext @@
! + three map entries added:
+ runAsUser: 65532
+ runAsGroup: 65532
+ runAsNonRoot: true

# team-ns/templates/tekton-tasks/grype.yaml

@@ metadata.annotations.tekton.dev/platforms @@
! ± value change
- linux/amd64,linux/arm64,linux/ppc64le,linux/390x
+ linux/amd64

@@ spec @@
! + one map entry added:
+ volumes:
+ - name: cache-dir
+   emptyDir: {}

@@ spec.params.GRYPE_IMAGE.default @@
! ± value change
- docker.io/anchore/grype@sha256:0ca1a530362e8ef2a42bcf3ddcb17e656c7c268d7c6e26729d4bb1a80bbd9fe1
+ docker.io/anchore/grype@sha256:f666817cbac2bee23cc78a433b4e739456ce221438c0c8ac6bdeaf7bc1a73839

@@ spec.steps.grype @@
! + one map entry added:
+ volumeMounts:
+ - name: cache-dir
+   mountPath: /.cache

@@ spec.steps.grype.securityContext @@
! + three map entries added:
+ runAsUser: 65532
+ runAsGroup: 65532
+ runAsNonRoot: true

# values-repo.yaml