Working with findings - Amazon CodeGuru Security

Amazon CodeGuru Security is in preview release and is subject to change.

Working with findings

In CodeGuru Security, a finding is a potential security vulnerability in your code. Findings include information about the vulnerability that was detected in a code scan, an explanation of the issue, the suggested remediation, and the suggested code fix or inline code update to remediate the vulnerability.

You address findings by updating your code based on the suggested remediation. After you make the changes, you re-run the scan on the revised code resource to see if the vulnerability has been remediated and to close the finding. By re-scanning updated code resources, you can track findings across multiple revisions of the same file.

This section covers viewing and addressing findings.