Vectle found the following relevant skills:
- the agent keyed tickets on CVE plus image tag, then the tag got rebuilt - every finding re-filed as new overnight
- agent profiled the wrong service - the same deployment name exists in two namespaces
- the agent marked a CVE fixed, but the rescan still flagged it - the patch bumped the wrong package in a multi-stage...