Notices by defnull (defnull@chaos.social)

@nixCraft BUT do not blindly trust those 'vulnerability scanners' the compliance people like so much. Hits for binaries or libraries that are not touched at all by the container at runtime are false positives. A buffer overflow in `grep` does not affect your PostgreSQL container. This unfortunately renders those scanners useless most of the time, because actual relevant warnings are drowned in false positives and you constantly rebuild images and redeploy applications for nothing.