CRA Evidence Grype Engine

This distribution contains a modified build of Anchore Grype, licensed under
the Apache License, Version 2.0. The upstream project is available at
https://github.com/anchore/grype.

CRA Evidence modifications add fork-governed scan-free SBOM generation and a
resident batch scanning command, and retain a measured package lookup
optimization. The executable reports its CRA Evidence version, source commit,
build date, upstream base description, and embedded Syft version through its
machine-readable version output.

Copyright notices and licence terms from the upstream project and its
dependencies remain applicable.
