sonar-cryptography
sonar-cryptography copied to clipboard
cbomkit
This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.
Hello, I have been conducting experiments with your plugin and would like to share some of my results. Thank you for the great work! ### Context: sonar-cryptography plugin version: 1.4.5...
When analysing https://github.com/docling-project/docling the python scanner creates FPs on code related to model generation such as ``` python generated_ids = self.vlm_model.generate( **inputs, max_new_tokens=self.max_new_tokens, use_cache=self.use_cache, temperature=self.temperature, ``` This finding comes across...
