Recheck syft/grype in GitLab CI/CD

[debuglevel]

I don't know if syft really collects everything. It seems not to pick up things in docker image, which are found in pure jar
https://gitlab.com/debuglevel/greeting-microservice/-/jobs/2141971637
https://gitlab.com/debuglevel/greeting-microservice/-/jobs/2141971636