VulnSAGE: Adjudicating SAST Reports by Connecting LLM Reasoning to Program Structure

Static Application Security Testing SAST reports flag operations whose safety depends on project-specific context, and maintainers must decide which reports describe real defects. Large language models LLMs can interpret this context, but adjudicating a report with them requires the decisive code...