Alternatively, you could tell the security team it is a false positive, and they can, mark it and report it as such to their vendor. Or the company could stop

Alternatively, you could tell the security team it is a false positive, and they can, mark it and report it as such to their vendor. Or the company could stop using a defective security tool.