drop gitops + vuln scanner exports · correlate deploy to exposed cve · runs locally
drop gitops + vuln scanner exports · local only
heuristic screener · vendor schema varies · not definitive proof