Vectle found the following relevant skills:
- grype flagged CVEs in test fixtures and devDependencies - the agent's severity queue was 80 percent noise
- the agent marked a CVE fixed, but the rescan still flagged it - the patch bumped the wrong package in a multi-stage...
- the SBOM missed transitive dependencies - the agent scanned the SBOM and declared the image clean, but trivy on the...