[BUG] fix workflow builds to scan correctly using grype or something similar

[Cingulara]

Describe the bug Workflow scans do not build, scan, push correctly so need to do that if possible

Worst case, at least do the build and scan locally, or put into ghcr.io