I understand the dread people have for these scans, more noise than signal With that said, if your application doesn't need these things, why are they in there

I understand the dread people have for these scans, more noise than signal With that said, if your application doesn't need these things, why are they in there? Time and effort, usually. So there's a choice; continue chasing the vulns or you can improve your builds. You get out what you put in, the process can be valuable. It's not because cargo-culting.