Skip to main content

Key Concepts

Projects​

A logical sub-unit within a repository that Dam Secure discovers automatically, such as a backend service, frontend app, shared library, or root configuration. Analysis is scoped at the project level, so each project is reviewed with an understanding of its own language, framework, and role.

Projects panel showing the projects discovered inside an onboarded repository

Applications​

A group of repositories that work together, such as a web app, its API and the services behind it. When Dam Secure reviews a pull request in one of them, it also reads the others for context, so it can tell whether a risk is real across repository lines. See Applications.

Rules​

The security checks Dam Secure applies to your code. Every pull request is reviewed through nine built-in vulnerability review lenses, such as Access Control and Injection & Code Execution. See the Rules overview.

Issues​

  • Issue: A security problem Dam Secure has found within a specific project. Each Issue carries a severity and a list of every location in the project where the problem occurs. Issues move through a triage workflow (Open, Confirmed, Fixed, Dismissed) so remediation progress is visible and auditable.
  • Sub-issue: A single occurrence inside an Issue, tied to a specific file and line range, with the offending code as evidence and a plain-language explanation. Sub-issues are triaged one at a time, which is how engineers separate confirmed problems from false positives without losing context on the rest of the issue.

Issue detail showing the issue summary, its sub-issues, and the attack story