Triage a finding

You decide what happens to a finding: snooze it, ignore it, or override its severity, all from its actions menu. The same actions are available on a single finding and on a group of similar findings, on Issues. Every action takes an optional reason you can record alongside it.

Snooze

Snooze a finding when you plan to deal with it later. Set a snooze-until date and an optional reason. The finding moves to a snoozed state and stays there until you unsnooze it from the same menu. Snoozing does not solve the finding or stop later scans from detecting it.

Ignore

Ignore a finding when you have decided it does not need action. The dialog gives you three choices: ignore just the findings you selected, ignore current and future findings under a path in the repository, or ignore current and future findings for a security rule, in one repository or all of them. The path and rule choices also cover findings that future scans turn up, so you ignore a class of finding once rather than each time it reappears.

Pick the narrowest choice that covers your decision; an ignore that’s too broad hides future findings you’d want to see.

Override severity

Override the severity when the computed level isn’t how you’d rank it. Pick a new level, add a reason if you want one, and save. The finding shows your level instead of the scored one. An override isn’t permanent: removing it restores the computed severity. You can override a single finding or a whole group.

What’s next

Findings and severity How severity and status are computed in the first place.

Fix a finding with an agent Hand a finding to an AI agent to fix.