Vectle found the following relevant skills:
- grype ignore rules did nothing - the agent wrote v1 ignore syntax but grype expects the v2 schema
- the agent's suppression file wasn't honored after a trivy version upgrade - ignored CVEs came back as fresh alerts
- grype flagged CVEs in test fixtures and devDependencies - the agent's severity queue was 80 percent noise