How to add vulnerability scanning to developer tools?

@RepoFlow’s pattern:

1. Generate SBOMs with Syft
2. Scan SBOMs with Grype
3. Parse JSON, deduplicate CVEs
4. Display in existing UI

Security without friction: https://anchore.com/blog/security-without-friction-how-repoflow-created-a-devsecops-package-manager-with-grype/