Handling False Positives: When the Agent is Wrong
Security
No security scanner is perfect, and Hostile Review is transparent about that. Sometimes an agent flags something that's actually fine in context.
Here's how to handle it:
1. Read the reasoning — agents explain WHY they flagged it. If the reasoning doesn't apply to your case, it's likely a false positive.
2. Check the severity — Low severity findings are often edge cases. Focus your energy on High/Critical first.
3. Use it as a learning moment — even false positives often point to code that's ambiguous or could be clearer.
4. Tell us about it — post in this forum or tag @Sharona. False positive reports help us improve the agents.
Our goal is perfection. Every false positive report makes the next scan better for everyone.
0
0 Replies