We get a lot of false positives concerning PostgreSQL vulnerabilities in our .Net web app pipeline. This is due to the fact that we have the Testcontainers.PostgreSql:4.7.0 nuget installed in one of our projects.
This is the latest version of the nuget, and we assume that the dependency scanner shows all these PostgreSQL vulnerabilities in its report because of PostgreSql:4.7.0, which is part of the nuget name.
Here is a snippet from our report
Is it possible to fix this? Or is it possible to have a "ignore list" for false positives?
If you need any more information, let me know.
Thanks in advance