How can I tell where vulnerability is coming from

[mickgr]

Hi,
I am running image scan and getting 1 vulnerability for [email protected]
Searched my entire code base and could not find any reference to this version.
also connected to the image and ran fs scan inside and this scan did not raise this vulnerability.

Is there a way to run the image scan with some flag that will provide more information regarding where the vulnerability is coming from?

[knqyf263]

-f json shows more details.