Verification · Finding validation · Finding deduplication
Semantic dedup
Cluster findings by embedding similarity and location.
How to build it
- Embed each finding's message and code excerpt with a fixed sentence encoder.
- Group findings that have close vectors and sit in the same file.
- Review the groups in a log before merging them automatically.
Signals in a repository
- A dedup script that imports sentence_transformers or faiss.
- An index file or cache of finding vectors in a build artifact.
- A threshold constant that sets the similarity cut-off.
In practice
No scanned repository runs a tool for this check. The steps above are the only guidance.