chore: bump anchore/scan-action from 5.2.1 to 5.3.0 (#1476)

Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from
5.2.1 to 5.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/scan-action/releases">anchore/scan-action's
releases</a>.</em></p>
<blockquote>
<h2>v5.3.0</h2>
<h2>New in scan-action v5.3.0</h2>
<ul>
<li>chore(deps): update Grype to v0.85.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/408">#408</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
<li>chore(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.2 to
0.38.3 (<a
href="https://redirect.github.com/anchore/scan-action/issues/406">#406</a>)
[<a href="https://github.com/dependabot">dependabot</a>]</li>
<li>chore(deps-dev): bump eslint from 9.14.0 to 9.15.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/405">#405</a>)
[<a href="https://github.com/dependabot">dependabot</a>]</li>
<li>chore(deps-dev): bump husky from 9.1.6 to 9.1.7 (<a
href="https://redirect.github.com/anchore/scan-action/issues/407">#407</a>)
[<a href="https://github.com/dependabot">dependabot</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/anchore/scan-action/commit/869c549e657a088dc0441b08ce4fc0ecdac2bb65"><code>869c549</code></a>
chore(deps): update Grype to v0.85.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/408">#408</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/5384d4fc3f3be62838337b71abbe2970cf3d8282"><code>5384d4f</code></a>
chore(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.2 to 0.38.3
(<a
href="https://redirect.github.com/anchore/scan-action/issues/406">#406</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/5ea8d10b3d4b830102f3d8181e5205cfdd3da7ef"><code>5ea8d10</code></a>
chore(deps-dev): bump eslint from 9.14.0 to 9.15.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/405">#405</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/f066535614877ccdaca253c0ba86cd5681c21b65"><code>f066535</code></a>
chore(deps-dev): bump husky from 9.1.6 to 9.1.7 (<a
href="https://redirect.github.com/anchore/scan-action/issues/407">#407</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/scan-action/compare/f2ba85e044c8f5e5014c9a539328a9c78d3bfa49...869c549e657a088dc0441b08ce4fc0ecdac2bb65">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/scan-action&package-manager=github_actions&previous-version=5.2.1&new-version=5.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/container-scan.yaml

@@ -40,7 +40,7 @@ jobs:
           echo "ignore:" > ~/.grype.yaml
           echo "  - vulnerability: GHSA-3xgq-45jj-v275" >> ~/.grype.yaml
       - name: Vulnerability Scan
-        uses: anchore/scan-action@f2ba85e044c8f5e5014c9a539328a9c78d3bfa49 # v5.2.1
+        uses: anchore/scan-action@869c549e657a088dc0441b08ce4fc0ecdac2bb65 # v5.3.0
         with:
           image: "pepr:dev"
           fail-build: true