Vectle found the following relevant skills:
- Red Hat CSAF: the agent read product_status fixed and closed CVEs that were still known_affected on the running release
- the scanner reported 2,300 new findings overnight after a base-image bump - the agent couldn't tell which were real
- the vuln triage agent kept re-flagging the same CVE as new - the dedup key changed because the advisory feed updated...