express their findings of weaknesses in code, design, and architecture using CWE identifiers. This common language for
expressing weaknesses has eliminated much of the ambiguity and confusion surrounding exactly what the tool or service
has found. At the same time, different vendors take different approaches as to how they look for weaknesses and what
weaknesses they look for. The CWE Coverage Claims Representation (CCR) is a means for software analysis vendors