Exceptions example

The following example demonstrates configuring a file path exception.

In the AcmeApp GitLab repository, the app > views > messages folder is used to house configuration for notifications in your Acme application.

Since it contains content being developed by your own organization, the AcmeApp content is scanned with SAST or IaC. However, some of the content in this messages folder can trigger false positive vulnerabilities. This file path can be added to the exceptions list so that it is excluded from the vulnerabilities list.

To add the file path as an exception:

1. Go to Code security > Exceptions.

2. Click Add exception.

   1. Define the Vulnerability criteria.

   2. Select the Codespace that includes the AcmeApp repository.

   3. Set the Repository as AcmeApp.

   4. Enter the Criteria filepath as app/views/messages.

   5. Select the Scanner types.

      

3. Define the Context:

   1. Set the Reason to False positive.

   2. Enter a comment to describe why this file path is being excluded from the vulnerabilities list.

      

4. Click Save. The exception has been added to the Exceptions overview page.