Pin Grype db for tests #120

[kzantow]

Download and use a static Grype database for snapshot testing. This started out because I missed some documentation referencing v2 release instead of v3 and had failed tests, so went down a bit of a rabbit hole making the tests reproducible and easier to understand by reverting back to the normal Jest reporter and removing the mountains of Grype output dumped to the logs.

[kzantow]

@luhring this had to expand scope just a bit... tests failed because it's not using a static Grype db (I need to figure out how to do this; will add a ticket). Regardless, I needed a way to see the differences and update snapshots. Because of how jest reporting works, it was impossible to figure out what was going on without reverting to the normal reporter (instead of jest-summary-reporter) and there was simply too much in the logs in strange locations (not sequentially) when the entire Grype output is dumped to the logs. Also, while working on the sbom-action I found the grouping on very large outputs to be quite buggy and hard to deal with, hence quelling this in the logs.

This PR completely changed 😬

[luhring]

Looks good! 👍