States

States

The states that can be assigned to the discoveries are illustrated as follows. These are the only states actually supported by the system, therefore trying to set a state different from these ones will cause an error.

• new: a new discovery, not analyzed/classified yet.
• false_positive: a discovery classified as a false positive.
  Example:

  username = "myusername"
  password = "changeme"
  

• addressing: a discovery that is currently being addressed, but not fixed yet.
• not_relevant: a real credential leak that is not harmful (e.g., passwords used for local services).
  Example:

  db_host = "localhost"
  db_password = "real_pw"
  

• fixed: a discovery that has been fixed (e.g., it has been removed from the history of the repository).