Trivy vs Grype head-to-head: scope, vulnerability DB sources, accuracy, SBOM workflow (Grype + Syft vs Trivy built-in), …