title: What will happen If I remove some extensions folder to remove false positive CVE?
body: <p>I'm using <a href="https://github.com/coder/code-server" rel="nofollow noreferrer">Code-Server</a> to create a container image based on Code-Server and other tools. When I use <a href="https://github.com/anchore/grype" rel="nofollow noreferrer">grype scanner</a>, I'm getting a lot of False Positive vulnerabilities related to the <a href="https://github.com/microsoft/vscode/tree/main/extensions" rel="nofollow noreferrer">extensions folder</a>. These are some of them:</p>
  <p><a href="https://i.stack.imgur.com/G0tSB.png" rel="nofollow noreferrer">False positive CVE image</a></p>
  <p>I'm wondering if there is a consequence if I decide to remove some of those extensions folder that I don't use, for example <a href="https://github.com/microsoft/vscode/tree/main/extensions/perl" rel="nofollow noreferrer">perl</a>, <a href="https://github.com/microsoft/vscode/tree/main/extensions/ruby" rel="nofollow noreferrer">ruby</a>, etc.</p>
  <p>Thanks !!</p>