ISSUES
A bug report you can check.
Corbulo searches across values, calls, contracts, error paths, tests, and sibling implementations, then keeps the code and path needed to verify the failure with the finding.
FINDING EVIDENCE
The bug and the line that proves it
The assignment stores a literal in place of the parsed refresh token. The finding shows the exact statement, the broken refresh flow, and the correction.
FROM CANDIDATE TO FINDING
The detector does not get to prove itself right.
Search broadly
Deterministic engines, static analysis, graph queries, and model-led investigation produce candidate failures across the repository.
Build clean context
Corbulo gathers code, callers, routes, data flow, tests, and sibling behavior without treating the candidate's own conclusion as evidence.
Test the failure
A separate pass checks whether the path is reachable, the failure can be triggered, and the result is harmful. Refuted candidates are dropped.
ONE ISSUE LIST
Triage the result, not the machinery.
Filter active, resolved, dismissed, and automatically dismissed findings by severity, category, source, rule, and architecture zone.
Dismiss one case, mark a false positive, create a reusable dismissal rule, restore it later, or send a selected finding to GitHub Issues.