Every check, and what it is for

The deterministic checks, exactly as the scanner holds them. Each is rated twice, once for whoever ships an application and once for whoever runs it, because the same evidence does not mean the same thing to both.

What the identifiers mean

A report full of codes asks the reader to take on trust that the scanner has a filing system. Here is the system.

Loading the catalogue…

The five families below are the pattern checks, and they are listed individually. The other five describe checks produced by the recovery, packaging and dependency stages rather than by the pattern table, so they have no fixed list: a dependency finding is whatever OSV reported about the packages your application happens to ship.

Loading the catalogue…