Someone commented (I can't find it now) that post disclosure they ran 5 or 6 coverage tools and one of them flagged it. They didn't say how much else got flagg

Someone commented (I can't find it now) that post disclosure they ran 5 or 6 coverage tools and one of them flagged it. They didn't say how much else got flagged, and how many false positives there were. It's very easy to retrospectively look through the list and say "oh yeah, there it is, amongst this big pile of nonsense".