Qodana baseline limits: when does a stale qodana.sarif.json start masking genuinely new problems?
We run Qodana in CI with a pinned linter image tag and a versioned qodana.yaml to keep analysis repeatable across developer machines and pipelines. To adopt it on a legacy module, we generated a baseline file (qodana.sarif.json) so the quality gate only fails on new violations rather than the existing backlog. What we cannot pin down is the baseline's matchi