The Findings page covers your 25 most recent completed scans. A scan still in progress does not appear here. Its findings appear on its own page when it finishes.
Columns
The list sorts by severity, from critical to info. A footer shows how many findings match the current filters.
Filters
The page opens with Verdict set to Confirmed and Duplicate set to Unique only. Change either filter to see everything.
On the page of a scan that ran live tests, each finding also shows a live badge, and a filter selects one live result.
Duplicates
A duplicate finding carries a Duplicate badge. It shows the verdict and the score of the primary finding it was folded into. Its detail page names that primary finding and links to it.Download findings
A scan’s own page adds a checkbox to each finding row. Select the findings you want, then select Download findings to save them as a zip of Markdown files.Finding detail
Select a finding to open its full record. The top of the page shows the severity, the verdict, the live result when there is one, a duplicate badge when it applies, the agent, the title, and the summary. Below them are the file path and the line range, the confidence bar, and the CVSS (Common Vulnerability Scoring System) score and vector.
A confirmed finding that is not a duplicate has a suggested fix: a code change that fixes the issue. The platform never changes your code. Review the fix, apply it yourself, and run your tests.
Select Copy GHSA to copy the finding as a GitHub Security Advisory (GHSA) style block. The block includes the title, summary, details, proof of concept, impact, suggested fix, CVSS score and vector, and references.
Select Back to scan to return to the scan that produced the finding.