Group repeated security findings

Supply finding metadata to group repeated reports. Original row indexes remain available, so each group can be traced back to its input.

In your browser nothing you paste is uploaded

What to provide

The example combines findings from overlapping scans and retains separate locations.

findings: An array of findings. Each needs a ruleId and path; line, severity, fingerprint, and evidence are optional.
matchBy: Optional "location" or "fingerprint". Location uses rule, path, and line.
severity: Optional severity: critical, high, medium, low, info, or unknown. Uppercase is also accepted.
evidence: Optional short supporting text. It stays attached to the source finding in the result.

Input template

{
  "matchBy": "location",
  "findings": [
    {"ruleId": "your-rule", "path": "src/app.js", "line": 1, "severity": "high"}
  ]
}

Groups only the records you provide. Matching records may still describe different causes; review groups before dismissing findings.

This checks one thing. A scan reads your whole repository and tells you what an attacker would find first.

Free scan

More tools