Reduce Grype Vulnerability Noise with a Simple Config File

Developers can now silence false-positive CVEs in Grype scans by adding a .grype.yaml file to their project root. The config lists vulnerabilities to ignore, with optional reasons, helping teams focus on real threats. This approach reduces alert fatigue in software supply chain security.