fold/.fold-suppressions
trvon ffaa70573a
chore: add self-scan suppressions file + dogfood results
- 237 findings: 230 clones (97% macro-generated), 7 security (all FP)
- composite_observer.hpp: #1 clone source (intentional macro forwarding)
- Security findings all confirmed FP: guarded argv, conditional comp
- Suppressions file: .fold-suppressions for reproducible clean scans
2026-05-28 10:49:02 -04:00

23 lines
925 B
Text

# fold self-scan suppressions — these are intentional patterns in our own codebase.
# Format: <ruleId> <file-pattern> [reason]
# composite_observer.hpp: macro-generated forwarding methods — intentional design
fold.clone include/fold/cli/composite_observer.hpp
# taint_track.hpp: hash/eq function objects — same structure by design
fold.clone include/fold/detect/taint_track.hpp
# scan_runner.cpp: multiple Backend implementations share factory structure
fold.clone src/cli/scan_runner.cpp
# encoder.cpp: encodeExpr dispatch is intentionally repetitive
fold.equiv src/symbolic/encoder.cpp
# main.cpp: CLI flag parsing has guarded argv access (line 316)
fold.null-deref src/cli/main.cpp
# fold_swift.cpp: argv access guarded by argc check (line 212)
fold.null-deref tools/fold-swift/fold_swift.cpp
# encoder_callee_names.cpp: conditional compilation branches
fold.dead-branch src/symbolic/encoder_callee_names.cpp