diff --git a/.semgrepignore b/.semgrepignore
index cb655af1..b65ff62f 100644
--- a/.semgrepignore
+++ b/.semgrepignore
@@ -19,6 +19,9 @@ test/
 tests/
 *_test.go
 
+# false positive
+testutil/network/network.go
+
 # Semgrep rules folder
 .semgrep
 
diff --git a/gql/util.go b/gql/util.go
index 66b4607b..1bc5748f 100644
--- a/gql/util.go
+++ b/gql/util.go
@@ -170,8 +170,8 @@ func getReferences(ctx context.Context, resolver QueryResolver, r *registrytypes
 
 func getIds(obj map[string]interface{}) []string {
 	var ids []string
-	for _, val := range obj {
-		if innerObj, ok := val.(map[string]interface{}); ok {
+	for key := range obj {
+		if innerObj, ok := obj[key].(map[string]interface{}); ok {
 			if _, ok := innerObj["/"]; ok && len(innerObj) == 1 {
 				if _, ok := innerObj["/"].(string); ok {
 					ids = append(ids, innerObj["/"].(string))