Should we target zero false positives?
While scanning millions of documents for secrets, should we really aim at reaching absolute zero or is the story not so simple?
Tags: sast, infosec, appsec, datascience