Automated Static Analysis Coverage
Automated Static Analysis Coverage measures the extent to which an automated security tool can inspect a codebase without executing the program. It tracks the percentage of code branches, logic paths, and contract dependencies successfully analyzed by the tool.
Higher coverage indicates a more comprehensive scan and a lower probability of hidden vulnerabilities in untested sections. The metric helps developers understand the limitations of their security pipeline and identify areas that require manual inspection.
It provides a confidence score in the overall security report generated by the tool. By optimizing this coverage, protocols can ensure that even obscure edge cases are subjected to rigorous scrutiny.