Scanner Exclusions Mismatch

Security scanners keep reporting findings after dependency updates because root-scope rules and exclusion configurations don’t apply consistently across scan types and transitive graphs, producing false positives and “disputed” vulnerabilities that still require manual review.