Chore: [AEA-0000] - use name:tag for syft, grype, grant containers

[anthony-nhs]

Summary

• Routine Change

Details

• use name:tag for syft, grype, grant containers

[github-actions]

This PR is linked to a ticket in an NHS Digital JIRA Project. Here's a handy link to the ticket:

AEA-0000

[Copilot]

Pull request overview

This PR makes the devcontainer build chain explicitly reference locally-built Syft/Grype/Grant images using the name:tag form (specifically :latest) so the FROM stages and Makefile build targets are consistent and explicit.

Changes:

• Update src/base/.devcontainer/Dockerfile to use local_syft:latest, local_grype:latest, and local_grant:latest in multi-stage FROM lines.
• Update Makefile build targets to tag the locally-built images as :latest to match the Dockerfile.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
src/base/.devcontainer/Dockerfile	Switch multi-stage FROM references to local_*:latest for explicit name:tag usage.
Makefile	Tag locally built syft/grype/grant images as local_*:latest to align with Dockerfile stages.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.