Reducing false positives in security scanning
Prepare a short explanation of how you would prioritize findings that are actually reachable in a codebase. Practice describing one example where you cut noise for developers.
The company's goal is to find and remediate the vulnerabilities that are actually reachable given how customers use their dependencies.
Source posting