1 · Paste a repository tree and file contents

The box below is preloaded with sample data (not a real repository). Replace it with your own paste. File contents must be delimited by one of these header forms, because a finding may only be reported when it has a file name and a line number: === path/to/file ===, --- file: path/to/file --- or @@ file: path/to/file @@. Everything above the first header is treated as the repository tree and is never reported - matches there are refused, since a tree line has no file:line.

2 · Run state (computed from the paste above)

3 · Reported findings

4 · Baseline tracking · no_longer_reported

A finding that stops being reported is labelled no_longer_reported. The analyzer never marks it fixed: absence of a report is not evidence the defect was repaired.

5 · Refused matches (not reported)

A match that cannot name a file and a line, or whose line cannot be quoted faithfully, is refused instead of reported. Refusals are counted, never listed as findings.