Whether the build step should only return information for fixable vulnerabilities.