FAQCommon questions about scans, findings, and your workspace.Scans Do I need to connect a repository?Can a scan break my application?The scan barely reached anything. Why?Standard or deep? Findings What if a finding is a false positive?I shipped a fix. Why is the finding still open?Can findings go straight to our issue tracker? Workspace Where are my scan credentials stored?Who can delete the workspace?How do I lock down sign-in?Run your first scanAdd an asset, start a scan, and read what it found.Scan modesBlack box, grey box, and white box, and when to use each.