chore: use latest yardstick (#1438)

Include changes to gate.py to correctly guess that local builds of grype
are considered the changed version, not the latest release.

Signed-off-by: Will Murphy <will.murphy@anchore.com>

test/quality/.yardstick.yaml

@@ -99,6 +99,8 @@ result-sets:
 
         - name: grype
           version: git:current-commit
+          # for local build of grype, use for example:
+          # version: path:../../
           takes: SBOM
 
         - name: grype

test/quality/gate.py

@@ -71,6 +71,13 @@ def guess_tool_orientation(tools: list[str]):
             continue
         current_tool = tool
 
+    if latest_release_tool is None:
+        for tool in tools:
+            if "@path:" in tool:
+                current_tool = tool
+                continue
+            latest_release_tool = tool
+
     if latest_release_tool is None:
         # "latest" value isn't accessible, so we do a best guess at which version is latest
         latest_release_tool, current_tool = sorted(tools)
@@ -334,4 +341,4 @@ def setup_logging(verbosity: int):
     )
 
 if __name__ == '__main__':
-    main()
+    main()

test/quality/requirements.txt

@@ -1,3 +1,3 @@
-git+https://github.com/anchore/yardstick@v0.7.0
+git+https://github.com/anchore/yardstick@v0.8.0
 # ../../../yardstick
 tabulate==0.9.0