False positives? #242
Description
Have a look at https://github.com/citizensadvice/fluentd-docker/security/code-scanning/30, the CVE is about busybox < 1.35 , and busybox is on 1.35.0-r29 (and so is ssl_client) ... interestingly when running grype on an image built in the same way locally, I don't get this issue.