Merge pull request #1634 from buildpacks/jab/supress-cves-not-fixable

Suppress CVEs in .grype.yaml

Author: jabrown85

.grype.yaml

@@ -3,3 +3,5 @@ ignore:
   - vulnerability: CVE-2021-22570 # false positive, see https://github.com/anchore/grype/issues/558
   - vulnerability: CVE-2024-41110 # non-impactful as we only use docker as a client
   - vulnerability: GHSA-v23v-6jw2-98fq # non-impactful as we only use docker as a client
+  - vulnerability: GHSA-x744-4wpc-v9h2 # AuthZ plugin bypass; not exploitable as lifecycle only uses docker as a client. Fixed in moby/moby/v2 but not backported to docker/docker module.
+  - vulnerability: GHSA-pxq6-2prw-chj9 # plugin privilege validation off-by-one; not exploitable as lifecycle only uses docker as a client. Fixed in moby/moby/v2 but not backported to docker/docker module.