fix

anthony-nhs · anthony-nhs · commit 0af1a532eb8e · 2026-04-08T08:21:35.000Z
diff --git a/.gitignore b/.gitignore
@@ -28,3 +28,4 @@ _site/
 vendor
 .cfn_guard_out/
 .trivy_out/
+.sbom/
diff --git a/.grype.yaml b/.grype.yaml
@@ -0,0 +1,3 @@
+ignore:
+  # path-to-regexp - dependency of aws-sdk-client-mock
+  - vulnerability: GHSA-j3q9-mxjg-w52f
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -23,6 +23,14 @@ repos:
 
   - repo: local
     hooks:
+      - id: grype-scan-local
+        name: Grype scan local changes
+        entry: make
+        args: ["grype-scan-local"]
+        language: system
+        pass_filenames: false
+        always_run: true
+
       - id: check-commit-signing
         name: Check commit signing
         description: Ensures that commits are GPG signed

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+ignore:`
	`2`	`+ # path-to-regexp - dependency of aws-sdk-client-mock`
	`3`	`+ - vulnerability: GHSA-j3q9-mxjg-w52f`