fix grype aliases, again

Author: sjpb

.grype.yaml

@@ -578,6 +578,42 @@ ignore:
 
 # CVE-2026-39831/GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh
 # Ignore: not using ssh
+  - vulnerability: GO-2026-5019
+    package:
+      location: /usr/bin/apptainer
+  - vulnerability: GO-2026-5019
+    package:
+      location: /usr/local/bin/node_exporter
+  - vulnerability: GO-2026-5019
+    package:
+      location: /usr/share/grafana/bin/grafana
+  - vulnerability: GO-2026-5019
+    package:
+      location: /usr/local/bin/promtool
+  - vulnerability: GO-2026-5019
+    package:
+      location: /usr/sbin/ondemand-dex-session
+  - vulnerability: GO-2026-5019
+    package:
+      location: /usr/libexec/apptainer/bin/starter
+  - vulnerability: GO-2026-5019
+    package:
+      location: /usr/libexec/apptainer/bin/gocryptfs
+  - vulnerability: GO-2026-5019
+    package:
+      location: /usr/local/bin/alertmanager
+  - vulnerability: GO-2026-5019
+    package:
+      location: /var/lib/grafana/plugins/grafana-opensearch-datasource/gpx_opensearch-datasource_linux_amd64
+  - vulnerability: GO-2026-5019
+    package:
+      location: /usr/local/bin/amtool
+  - vulnerability: GO-2026-5019
+    package:
+      location: /usr/local/bin/prometheus
+  - vulnerability: GO-2026-5019
+    package:
+      location: /usr/sbin/ondemand-dex
   - vulnerability: GHSA-89gr-r52h-f8rx
     package:
       location: /usr/bin/apptainer