false-positives
Safeguard articles tagged "false-positives" — guides, analysis, and best practices for software supply chain and application security.
31 articles
Reachability Analysis vs. SCA: Which Reduces Your Backlog?
SCA lists every CVE in every dependency. Reachability filters to the ones your code actually invokes. Here is how the two compare on a real backlog.
jQuery 3.6.0 Vulnerabilities: What Scanners Flag and How to Fix
jQuery v3.6.0 vulnerabilities show up in scan reports constantly, yet the core library has no CVE of its own at that version. Here is what your scanner is actually reacting to and how to clear it.
Sanitizer Detection: Griffin AI vs Mythos
A vulnerability that passes through a working sanitizer is not a vulnerability. Detecting that sanitizer accurately is the difference between actionable findings and noise.
What is a Reachability Analysis in SCA
Reachability analysis checks whether your code actually calls the vulnerable function inside a dependency — the difference between 400 alerts and 12 that matter.
Static Analysis False-Positive Reduction
A technique-by-technique tour of how modern static analyzers cut false positives, from CodeQL's path pruning to Infer's bi-abduction.
False Positive Rates in Container Scanning: Why Your Scanner Lies to You
Container scanners produce mountains of findings. A significant percentage are false positives. Here is how to measure and manage the noise.
Taming Static Analysis: A Practical Guide to False Positive Reduction
False positives kill SAST adoption faster than anything else. Here is how to cut through the noise without missing real vulnerabilities.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.