security-sweep

Graph-driven security sweep - — scan for dangerous sinks, then rank each finding by whether an entry point can actually reach it, and triage the rest into suppressions.