remove unused grype ignores

Author: sjpb

.grype.yaml

@@ -149,13 +149,6 @@ ignore:
     package:
       location: /usr/sbin/ondemand-dex-session
 
-
-# CVE-2026-33186 (GO-2026-4762) gRPC-Go server auth bypass -- TMP disable to check ignores are working
-# FIXME: should upgrade grafana to  Grafana 12.4.2
-  - vulnerability: GHSA-p77j-4mvh-x3m3
-    package:
-      location: /usr/share/grafana/bin/grafana
-
 # CVE-2024-45337 (GO-2024-3321) Misuse of ServerConfig.PublicKeyCallback -- not using ssh
   - vulnerability: GHSA-v778-237x-gjrc
     package:
@@ -447,17 +440,6 @@ ignore:
   - vulnerability: GO-2026-5026
     package:
       location: /usr/bin/ondemand_exporter
-# DEX: Negligible risk, unless used with IDNA URLs, which require an internationalised
-# domain name for the ondemand "servername" parameter. Leaving as fixme as should
-# patch when possible.
-# FIXME:
-  - vulnerability: GO-2026-5026
-    package:
-      location: /usr/sbin/ondemand-dex
-# FIXME:
-  - vulnerability: GO-2026-5026
-    package:
-      location: /usr/sbin/ondemand-dex-session
 
 # CVE-2026-39833/GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent
 # Ignore: Not using ssh