Scanner Exclusions Misapplied

SAST/SCA tooling exclusions get applied inconsistently across scan types (e.g., .snyk rules vs OS exclusions), so results silently miss or misclassify findings, leaving malware/backdoor risk or broken builds undetected until runtime.