Strict-Transport-Security 16.7 is not checking scope

I'm seeing unrelated / out of scope URLs in the STS report from the budget app benchmark report:

            "details": {
                "urls": {
                    "name": "URLs",
                    "type": "list",
                    "items": [
                        {
                            "type": "url",
                            "href": "https://fonts.gstatic.com/s/opensans/v29/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2"
                        },
                        {
                            "type": "url",
                            "href": "https://www.gravatar.com/avatar/b642b4217b34b1e8d3bd915fc65c4452"
                        }
                    ]
                }
            },