diff --git a/.grype.yaml b/.grype.yaml
new file mode 100644
index 0000000..de42756
--- /dev/null
+++ b/.grype.yaml
@@ -0,0 +1,3 @@
+# Managed by renovate-runner/scripts/reconcile-grype.sh - do not edit by hand.
+# Entries are High,Critical findings with a fix that no base image update provides.
+ignore: []