False-positive for "volatile source"
The following source is detected as volatile:
https://gitlab.com/ddcci-driver-linux/ddcci-driver-linux/-/commit/1ef6079679acc455f75057dd7097b5b494a241dc.patch
See this CI run for an example: https://gitlab.alpinelinux.org/WhyNotHugo/aports/-/jobs/1084168
However, this link includes a specific commit's hash, and is therefore immutable.