Ignore Violations

Ignore rules allow you to whitelist and ignore security violation rules, in order to filter out unwanted violation noise. For example, you might be running Advanced Scans on a testing repository and don’t want these violations to hinder your testing, or you might have instilled strict actions if a violation is found that is a blocker for continuing your development. You want to ignore the specific violation for the time being.

There are many reasons why you might want to ignore a violation, you can read more about it here Ignore Rules.

You can create an ignore rule for Exposures violation using the following REST API:

• Create Ignore Rule

Ignoring Secrets Violations

Ignore rules helps reduce noise by filtering out false positives or non-actionable violations in secret detection results.

1. Navigate to Scans List and locate the reported Secrets Violation.
2. Open the violation details and review the flagged issue.
3. Click Ignore Violation and configure an ignore rule using one of the following criteria:
   • Based on Secret Type – Ignore a specific type of secret (e.g., API Key, SSH Private Key).
   • Based on File Path – Ignore secrets found in a specific file or directory.
   • Based on Artifact Name – Ignore secrets detected in a particular artifact version.
4. Save the ignore rule to apply it to future scans.