Every finding type PullGuard can report, with remediation guidance and taxonomy mappings (CWE, OWASP Agentic Top-10). Pages are generated from the shipped remediation catalog, so they cannot drift from the scanner.
abandoned_codeactive_error_catalogagent_config_drift ASI04agent_hook_suspicious CWE-506 · ASI05agent_human_loop_disabled ASI02agent_instruction_hidden_unicode CWE-1427 · ASI01agent_instruction_injection CWE-1427 · ASI01agent_lethal_trifecta ASI03agent_unbounded_resources CWE-770 · ASI08agent_workspace_symlink_escape CWE-59 · ASI03ai_provenanceai_safety_disabledai_security_riskapi_inconsistencyapi_spec_mismatchbreaking_changebus_factor_riskcircular_importcircular_module_dependencycode_duplicationcommand_injection CWE-78contract_vulnerabilitycross_file_taint CWE-20custom_rule_violationdangerous_file_tracked CWE-540dead_exportdebug_mode_enabled CWE-489deep_directory_nestingdeep_nestingdependency_freshness_riskdestructive_sqldomain_boundary_violationemail_header_injection CWE-93empty_catch_block CWE-390endpoint_riskexcessive_any_typesexcessive_parametersflaky_test_indicatorformat_string_vulnerability CWE-134hardcoded_pathhardcoded_secret CWE-798high_churnhigh_cognitive_complexityhigh_cyclomatic_complexityhigh_error_ratehistorical_secret CWE-798hotspot_fileiac_add_from_url CWE-829iac_container_runs_as_root CWE-250iac_dockerfile_secret CWE-798iac_latest_tag CWE-829iac_missing_healthcheckiac_unpinned_base_image CWE-829iam_wildcard CWE-269inconsistent_error_handlinginconsistent_file_structureinconsistent_test_patternsinsecure_cookie CWE-614insecure_crypto CWE-327insecure_deserialization CWE-502insecure_file_permissions CWE-732insecure_temp_file CWE-377jwt_algorithm_confusion CWE-347k8s_cis_violationknowledge_concentrationknowledge_siloknown_cve CWE-1395known_issues_unresolvedlarge_componentlayer_violationldap_injection CWE-90license_review_requiredlicense_violationlog_data_exposure CWE-532log_injection CWE-117log_noiselow_assertion_densitylow_type_coveragemcp_config_plaintext_secret CWE-312 · ASI03mcp_tool_command_backdoor CWE-506 · ASI05mcp_tool_description_injection CWE-1427 · ASI01mcp_transport_unauthenticated CWE-306 · ASI07memory_leak_patternmemory_safety CWE-119missing_auth_check CWE-306missing_ci_workflowmissing_codeownersmissing_csrf_protection CWE-352missing_error_testsmissing_http_security_headers CWE-693missing_licensemissing_paginationmissing_readmemissing_security_policymixed_module_systemsmixed_naming_conventionsmonolithic_filemonolithic_functionn_plus_one_querynaming_inconsistencyopen_ingress CWE-284open_redirect CWE-601orphaned_dependencyorphaned_fileoverprivileged_agent_tool CWE-250 · ASI03panic_riskpath_traversal CWE-22performance_degradationpermissive_cors CWE-942permissive_postmessage_target CWE-346prompt_injection CWE-1427 · ASI01prototype_pollution CWE-1321public_storage_acl CWE-732rag_context_unisolated CWE-1427 · ASI06recurring_crashredos_vulnerability CWE-1333secret_in_llm_prompt CWE-200shell_unquoted_expansionsql_injection CWE-89ssrf_vulnerability CWE-918ssti_vulnerability CWE-1336stale_dependencystale_documentationstale_errorsstyle_driftsync_io_in_asynctainted_flow CWE-20timing_attack CWE-208tls_verification_disabled CWE-295unattended_command_execution CWE-829 · ASI05unbounded_agent_loop CWE-834 · ASI08undocumented_architectureundocumented_endpointunreachable_codeunresolved_importunsafe_file_upload CWE-434unsafe_model_deserialization CWE-502unsafe_reflection CWE-470unused_configunused_exportweak_rng_crypto CWE-338workflow_excessive_permissions CWE-250workflow_hardcoded_secret CWE-798workflow_missing_permissions CWE-250workflow_pwn_request CWE-829workflow_script_injection CWE-94workflow_unpinned_action CWE-829wrangler_default_url_exposed CWE-668xpath_injection CWE-643xss_vulnerability CWE-79