Now most of these reports are correct

This is the interesting part to me. I'm getting more hits now too. But it's still mostly misses or mitigated things where the bot didn't read or even understand the mitigation. The most generous explanation I have for this to make the report "correct", is that it is inline documentation debt that needs to be addressed.