logoalt Hacker News

witxtoday at 6:27 AM2 repliesview on HN

What, no they're not. You still need to analyze them to understand they are false positives. It's time wasted


Replies

chaoz_today at 10:00 AM

Agree, it's something that will eventually teach your developers to ignore points raised as it's mostly garbage.

onion2ktoday at 7:39 AM

Finding problems is optimizing for the customer. Avoiding false positives is optimizing for the developer. Which is right depends on your org's culture.

show 1 reply