Point to a pinned commit hash instead of a mutable tag

Signed-off-by: Victoria <kaysa.vps@gmail.com>

Author: kaysavps

.github/workflows/release.yaml

@@ -94,7 +94,7 @@ jobs:
           wget --no-verbose https://raw.githubusercontent.com/anchore/syft/c43f4fb416c34c1c4b3997373689d8d4c0fb9b36/install.sh -O - | sh -s -- -b /usr/local/bin
 
       - name: Install Grype
-        run: curl -sSfL https://raw.githubusercontent.com/anchore/grype/v0.109.0/install.sh | sh -s -- -b /usr/local/bin v0.109.0
+        run: curl -sSfL https://raw.githubusercontent.com/anchore/grype/fe186c3e986dda3cb4c5e90798f82c52aefcb4b8/install.sh | sh -s -- -b /usr/local/bin
 
       - name: Run GoReleaser
         id: release