Chocolatey not removed when installing 3.0.x agent
Chocolatey is not removed or removing proposed during the upgrade ton 3.X.X.X agents.
Chocolatey is seen as bundled with these agent versions even if no more used by them.
Thank you for highlighting this, we will consider how we can approach this, since some users had Chocolatey prior to installing VulnDetect.
Removing chocolatey isn't trivial for all users, since a few already used it or started using after it was installed by VulnDetect.
We are assessing ways to determine this in a reliable way, so we don't remove it if the user has used it.
Alternatively, we will release a removal script at some point, so you and others easily can remove it.