False positives violations created for deprecated projects
Projects with the deprecated
category don't fetch any data: https://gitlab.com/gitlab-com/gl-security/engineering-and-research/gib/-/blob/d1b4e2e074475f4f7b279041c5942d9a930c6efb/project.go#L192
But still, we run compliance policies on these projects. This leads to false positives, because some files are empty and some matching can't be done. This is the case here:
https://gitlab.com/gitlab-com/gl-security/engineering-and-research/inventory/-/issues/1400+ (internal link)
where the protected branches are not downloaded but we still try to do the comparison.