In /Users/josh/camunda/camunda-optimize/qa/clustering-tests/src/main/docker/optimize/Dockerfile, we use the openjdk:8-jre-slim base image. However, this contains vulnerabilities. We should update this dependency to a new image without such vulnerabilities.
This Dockerfile is only used for internal testing so not by customers, but it still flags in image scanning results.