CGA-8577-2m79-fvjr

Module "github.com/sigstore/rekor" at "/usr/bin/rekor-server": the commit of the fixed version (0c1914e5e955cb9f514e32b222cf61a13e91ab08) is an ancestor of installed commit (a6788566cd62facb0fb0450e9d2c2867f551e37c), which means the installed version was misidentified by the scanner and the vulnerability has actually been fixed.