diff --git a/.grype.yaml b/.grype.yaml
index 49367ca59cb..c848d9b2867 100644
--- a/.grype.yaml
+++ b/.grype.yaml
@@ -1,2 +1,7 @@
+add-cpes-if-none: true
+fail-on-severity: high
+output: table
 exclude:
   - "**/testdata/**"
+ignore:
+  - fix-state: unknown