- Use same scope param behavior as Vulnerabilities API
- Hide dismissed vulnerabilities by default or when scope = "dismissed"
- Include all vulnerabilities when scope = "all"