- there are security scans that just create noise without adding value; it might be useful to remove them. - there are outstanding cves that need to be fixed.