Accepting findings and rules
Mark a finding or an entire rule as accepted so it no longer counts towards the ratings.
Sometimes a finding is a known and accepted risk, a false positive, or something you decided not to fix. Accepting it excludes it from the counts and ratings while keeping an audit trail of who accepted it and why. Accepting requires the Whitelist findings permission on the application.
Accept one finding
- Open Findings, expand the rule and click View on the occurrence.
- Click Accept.
- Enter a Justification (required) and click Confirm accept.
Accept several findings at once
- Expand the rule and click Bulk accept above the occurrences.
- Tick the occurrences you want to accept (findings that are already accepted cannot be selected).
- Enter the Reason for accepting (required) and click Accept N selected. Use Clear to deselect everything or Cancel selection to leave bulk mode.
Accept a whole rule
- Click the ⓘ icon in front of the rule.
- Click Accept rule…, enter a justification and click Confirm accept.
Accepting a rule excludes every finding of that rule for this application, now and in future analyses.
What happens next
- Accepted occurrences show the status Accepted and are no longer counted towards the rule's findings.
- Ratings refresh after the next analysis recalculation, so the numbers on the Overview change only after a new analysis has run.
- All acceptances are listed under Manage › Accepting log, where they can be removed again.