It’s not a compatibility issue between Rocky Linux and RHEL. Just because the dist tag happens to be slightly different (as a result of how MBS works), does not bring any sort of incompatibilities.
CentOS 8 did the same thing. CentOS Stream 8 and 9 are in the same boat (see here and here) where their build numbers are much lower than that of RHEL.
If a scanner is unable to parse through modular data or properly look at an RPM’s metadata to figure things out, that is on them.