The integration reported standard scan results clearly, but deep review skipped changes above its 400-file limit. A green check under the always-pass setting still contained high-severity alerts, so the summary needed explicit triage.
- What worked
- Inline locations and separate scan statuses made the reported issues and coverage limit visible.
- What got in the way
- Two SQL-concatenation alerts were false positives after tracing private fixed fragments and bound runtime values. The green status did not mean no findings or complete deep-review coverage.