feat: Update grype configuration in release-arm.yaml

- Added `grype` option for NVIDIA Jetson AGX Orin model, set to true
- Set `grype` option for NVIDIA Jetson Orin NX model to false due to excessive vulnerabilities in the L4T rootfs
- Updated main `grype` configuration to use matrix values for flexibility

Signed-off-by: Itxaka <itxaka@kairos.io>

Author: Itxaka

.github/workflows/release-arm.yaml

@@ -105,9 +105,11 @@ jobs:
           - model: "nvidia-jetson-agx-orin"
             base_image: "ubuntu:22.04"
             cleanup: true
+            grype: true
           - model: "nvidia-jetson-orin-nx"
             base_image: "ubuntu:22.04"
             cleanup: true
+            grype: false # too many vulns under the L4T rootfs
     with:
       auroraboot_version: "v0.19.1"
       dockerfile_path: "images/Dockerfile"
@@ -121,7 +123,7 @@ jobs:
       registry_domain: "quay.io"
       registry_namespace: "kairos"
       iso: ${{ matrix.model == 'generic' }} # only produce ISOs for generic
-      grype: true
+      grype: ${{ matrix.grype }}
       grype_sarif: true
       trivy: true
       trivy_sarif: true