Verification · Finding validation · Path reachability check
Caller analysis
Find a real caller, config or workflow that produces the triggering state.
How to build it
- List every caller of the flagged function with a symbol index or call graph.
- Check each caller for the config, route or job that passes the triggering value.
- Mark the finding unestablished when no caller produces the state.
Signals in a repository
- An index.scip file or a scip indexing step in CI.
- A joern call graph export or script in the repository.
- Finding records that name the caller or config that produces the state.
In practice
No scanned repository runs a tool for this check. The steps above are the only guidance.