closed False positives, feedback and feature requests

A finding looks wrong

1. Open the finding in the report and check the file, line and excerpt.
2. If it still looks wrong, start a topic in secscan › Help & how-to with the scan ID, the rule ID (for example MAL-EVAL-DECODE or ZAP-10038) and why you think it is a false positive.
3. Never attach the file itself if it could contain secrets or malware; a short, defanged excerpt is enough.

We review every report and improve the rules.

Ideas and feature requests

Post them in secscan › Feature requests: describe the problem you want to solve, not only the solution. Other members can add their use cases.