more changes!

README.md

@@ -27,9 +27,10 @@ host only needs Docker. JSON reports are kept on disk for auditing.
      (useful for CI).
 3. Notifications are sent. When `IMPORTANT_CONTAINERS` is set, each named
    container gets its own complete CVE list (showing `C X/Y ...` where X is
-   fixable and Y is total per severity, plus `Total: fixable/total`), missing
-   important containers are reported, and every other container is summarised as
-   `fixable/total`. Without `IMPORTANT_CONTAINERS`, a single aggregated
+   fixable and Y is total per severity, plus `Total: fixable/total`), even if
+   there are no CVEs at or above `NOTIFY_MIN_SEVERITY`. Missing important
+   containers are reported, and every other container is summarised in chunks
+   as `fixable/total`. Without `IMPORTANT_CONTAINERS`, a single aggregated
    notification lists each CVE with the affected packages, containers, and
    images.
 
@@ -258,11 +259,13 @@ When the list is set, notifications are split into three groups:
 
 1. **One notification per important container**, titled
    `Vulnerability scan: <container> (<image>)`. It lists every CVE at or above
-   `NOTIFY_MIN_SEVERITY`, with a total split into fixable and unfixable.
+   `NOTIFY_MIN_SEVERITY` with `C X/Y H X/Y M X/Y L X/Y` and `Total: fixable/total`.
+   A notification is still sent if there are none, showing totals at 0/0.
 2. **One notification for important containers that are missing** – either not
    running, or running an image that was not part of the scan.
-3. **One summary notification for every other container**, listing the image,
-   container, total CVE count, and the fixable/unfixable split.
+3. **One summary notification for every other container**, split every ~12
+   containers (with per-part and overall totals), listing image/container and
+   `fixable/total`.
 
 A container can appear in only the important list or the summary, never both.
 If an important container shares its image with other containers, the others