Public search query: trivy HIGH severity CVE in base image: patch vs suppress with justification