When using the only-fixed: true flag, if vulnerabilities are found, but ignored, the log message states...
...which implies there are no vulnerability concerns.
However, iff vulnerabilities are found and ignored, a more accurate message would be...
No vulnerabilities (that have a fix available) found
... as this wording matches the documentation for the only-fixed flag.
Please could this wording change be considered 👍.