Is it? I saw a couple of comments that rightfully pointed out some minor things the analysis ignored like git's reflog and denyNonFastforwards, but it seems rea

Is it? I saw a couple of comments that rightfully pointed out some minor things the analysis ignored like git's reflog and denyNonFastforwards, but it seems reasonable to me beyond that. What other issues are there with the report?