Patent ID: 11868482
Assignee: GITLAB INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 9:
10. A computer program product comprising a non-transitory computer readable storage medium having instructions encoded thereon that, when executed by a processor, cause the processor to:
receive source code;
generate a parse tree from the source code;
extract scopes of source code blocks using the parse tree;
receive, from one or more code scanners, vulnerability reports relating to the source code, the vulnerability reports identifying vulnerabilities in the source code;
match the vulnerabilities identified in the vulnerability reports to corresponding scopes to generate a set of scoped vulnerabilities;
generate fingerprints of at least some of the scoped vulnerabilities, wherein the fingerprint for a vulnerability is generated using a scope of the vulnerability and an offset of the vulnerability, the offset being computed by subtracting a line number of the vulnerability from a start line of the scope;
deduplicate the scoped vulnerabilities using the fingerprints; and
generate a refined vulnerabilities report using the deduplicated scoped vulnerabilities.