Review feedback

Author: alpe

.github/workflows/docker-build-push.yml

@@ -1,7 +1,7 @@
 ---
 # This workflow builds and pushes Docker images to GHCR
 name: Build Docker Images
-permissions: {}
+permissions: { }
 "on":
   workflow_call:
     inputs:
@@ -12,7 +12,7 @@ permissions: {}
       apps:
         required: true
         type: string
-        description: 'JSON array of apps to build (e.g., [{"name": "testapp", "dockerfile": "apps/testapp/Dockerfile"}])'
+        description: 'JSON array of apps (e.g., [{"name": "testapp", "dockerfile": "apps/testapp/Dockerfile"}])'
 
 jobs:
   build-images:
@@ -29,7 +29,7 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v6.0.2
-  
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
 
@@ -50,7 +50,7 @@ jobs:
           tags: ghcr.io/${{ github.repository_owner }}/${{ matrix.app.name }}:${{ inputs.image-tag }}
 
       - name: Scan pushed image with Trivy
-        uses: aquasecurity/trivy-action@0.33.1
+        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
         with:
           scan-type: image
           image-ref: ghcr.io/${{ github.repository_owner }}/${{ matrix.app.name }}:${{ inputs.image-tag }}

apps/grpc/Dockerfile

@@ -30,5 +30,5 @@ EXPOSE 26656
 EXPOSE 26657
 EXPOSE 26660
 
-ENTRYPOINT ["evgrpc"]
+ENTRYPOINT ["/usr/local/bin/evgrpc"]
 CMD ["start"]