I'd like to be able to select a subset of gems based on the groups in the Gemfile.

In my case, rubyzip has an unresolved vulnerability but since I only use it in test or development, it doesn't matter to me.

I'd like to be able to say "report only gems that are ALWAYS required or are in the production group". Alternatively, being able to "ignore all gems that are ONLY used in test or development" would work too.