“In some cases, they're almost certainly vulnerabilities, but in all cases, you need a developer to look at the error messages that are generated and determine if a fix is necessary.”

Transcript evidence from Elissa Shevinsky — Static Analysis early and often.