Ignore CWE-937 and CWE-1035 reported in GitLab advisories when computing weakness TODOs #2382

Activity

1. ziadhany commented on Jul 16, 2026

   

   ziadhany

   on Jul 16, 2026

   Member

   More actions

   I think we should ignore all category nodes, not just CWE-937 and CWE-1035. Leaf CWE IDs have more accurate descriptions.
2. keshav-space commented on Jul 16, 2026

   

   keshav-space

   on Jul 16, 2026

   MemberAuthor

   More actions

   I think we should ignore all category nodes, not just CWE-937 and CWE-1035. Leaf CWE IDs have more accurate descriptions.

   @ziadhany yeah, that makes sense. we’ll ignore CWE IDs that belong to categories or views and only allow comparisons on actual weaknesses.
3. keshav-space

   added a commit that references this issue on Jul 16, 2026

   fix: do not compare CWE category and view in weakness todos

   ...

   c7be929
4. keshav-space

   linked a pull request that will close this issueAdd support for CWE weakness curation #2380on Jul 17, 2026
5. keshav-space

   removed a link to a pull requestAdd support for CWE weakness curation #2380on Jul 17, 2026
6. keshav-space

   closed this as completedin c7be929on Jul 17, 2026