4 ms·
Static analysis often shows many false positives. A more intelligent tool can help not to waste limited engineering time.
by sobellian 5mo ago
Static analysis often shows many false positives. A more intelligent tool can help not to waste limited engineering time.
- seanmcdirmid 5mo agoFalse positives are noise, but if the tool is filtering out its own noise via AI, it might work. Or you could take a high false positive/low false negative tool and instead of bothering humans with its noisy output, have AI investigate and evaluate if found issues are false positives or not.
- mbonnet 5mo agoThis is why you should have several of them checking against the same rulesets and cross-check them to reduce chasing of false positives.