VS CODE / CODESECURITY
Follow the finding. Read the evidence.
Two recordings follow the same finding through VS Code, the workbench and a saved Advisor explanation. The repository contains deliberately vulnerable SRE examples, so there is something concrete to investigate.
Inspect the finding

Start at the reported line, open the finding from its VS Code hover and inspect the source evidence in the workbench.
Finding review guideRead the saved Advisor review

Compare the saved explanation and suggested fix with the same source. The advice adds another reading; it does not decide the gate or verify a repair.
Advisor guide