Triage a finding

You decide what happens to a finding: snooze it, ignore it, or override its severity, all from its actions menu. The same actions are available on a single finding and on a group of similar findings, on Issues. Every action takes an optional reason you can record alongside it.

Snooze

Snooze a finding when you plan to deal with it later. Set a snooze-until date and an optional reason. The finding stays snoozed until you unsnooze it from the same menu. Snoozing does not solve the finding or stop later scans from detecting it.

Ignore

Ignore a finding when you have decided it does not need action. The dialog gives you three choices: ignore just the findings you selected, ignore current and future findings under a path in the repository, or ignore current and future findings for a security rule, in one repository or all of them. The path and rule choices also cover findings from future scans. You ignore a class of finding once instead of each time it reappears.

Pick the narrowest choice that covers your decision; an ignore that’s too broad hides future findings you’d want to see.

Override severity

Override the severity when the computed level isn’t how you’d rank it. Pick a new level, add a reason if you want one, and save. The finding shows your level instead of the scored one. An override isn’t permanent: removing it restores the computed severity. You can override a single finding or a whole group.

What’s next

Findings and severity How severity and status are computed in the first place.

Fix a finding with an agent Hand a finding to an AI agent to fix.