We are finishing off our new site on a test domain currently using 2.2.6 with no additional patches applied. I run the Magento Security Scan tool on the site (just to check it works at this stage) and it reports no problems.
How come the Magento Security Scan tool does not flag up that security updates are either available or required based on this page?
https://magento.com/security/patches/magento-2.3.1-2.2.8-and-2.1.17-security-updateI was hoping the scan tool would be something I can set to run daily and alert me of a vulnerability or if a patch/security update was available