Blog
The first repo Sieve's new baseline scan flagged was our own
PR scans only see the files you change. Sieve's baseline scan covers the rest of the repository and tracks it in a single GitHub issue. Minutes after we shipped it, it opened an issue against us.
Introducing Sieve: an ML filter that stops security scanners from crying wolf
Sieve scores static analysis findings as likely real or likely noise. Trained on 1,442 labeled findings across 26 repos, deployable in four lines of GitHub Actions YAML.