Added a double grype scan to show the suppressed scans without fail-on

entrypoint.sh

@@ -35,12 +35,16 @@ if [ -n "$INPUT_PLATFORM" ]; then
   GRYPE_OPTIONS+=("--platform" "$INPUT_PLATFORM")
 fi
 
+GRYPE_OPTIONS+=("registry:${IMAGE_NAME}")
+
+# shellcheck disable=SC2145
+echo "Running grype container scanning with options: ${GRYPE_OPTIONS[@]} --show-suppressed"
+grype "${GRYPE_OPTIONS[@]}" "--show-suppressed"
+
 if [ -n "$INPUT_FAIL_ON" ]; then
   GRYPE_OPTIONS+=("--fail-on" "$INPUT_FAIL_ON")
 fi
 
-GRYPE_OPTIONS+=("registry:${IMAGE_NAME}")
-
 # shellcheck disable=SC2145
 echo "Running grype container scanning with options: ${GRYPE_OPTIONS[@]}"
 grype "${GRYPE_OPTIONS[@]}"