VAT Cleanup
I mentioned this in the chore issue here, but there's a lot of noise there so it might have gotten missed, posting here as well.
The three CVEs for unzip are all deferred by red hat (I believe fixed in UBI10 if this image wants to move to that for a base).
Can they be marked as such in VAT to clean that up?
The PRISMA-2023-0056 issue has a related consul issue, with an open pull request.
Can statusing that make VAT happy?