Finding Exclusions

The Finding Exclusions feature allows you to filter out findings that don't apply to your specific use case. When you exclude a finding, similar findings will be automatically filtered out from all future scans of that repository.

info

Please note that this doesn't apply to the generated PDF, but only to your dashboard.

Why Exclude Findings?

Not every finding reported by AuditAgent may be relevant to your project. Common reasons to exclude a finding include:

• False Positive: The finding is technically incorrect for your specific implementation
• By Design: The behavior flagged is intentional and part of your contract's design
• Not Relevant: The finding doesn't apply to your specific context or use case

How to Exclude a Finding

From the Findings Page

When reviewing your scan results, you can exclude any finding directly from the findings view:

1. Navigate to the Findings tab in your scan results
2. Locate the finding you want to exclude
3. Click the "Exclude finding?" link on the right side of the finding

4. In the modal that appears, select the reason why this finding doesn't apply:
   • False positive — The finding is incorrect
   • By design — Intentional behavior
   • Not relevant — Doesn't apply to this context

5. Click Exclude to confirm

Once excluded, similar findings will be automatically filtered out from all future scans of this repository.

warning

As a precaution, some findings may still appear if we detect they could become relevant again due to changes in your codebase. This is why certain findings might not be excluded even after you've marked them.

Providing Feedback Without Excluding

If you want to mark a finding as incorrect without excluding similar findings from future scans, you can use the thumbs down button. This submits feedback to help improve AuditAgent's detection accuracy without affecting future scan results.

• Thumbs up: Mark the finding as helpful/accurate
• Thumbs down: Mark the finding as incorrect (feedback only)

Managing Your Exclusions

You can view and manage all your excluded findings from your profile:

1. Go to your Profile settings
2. Navigate to the Finding Exclusions tab under the "Other" section
3. Here you can see all your excluded findings grouped by repository

Removing an Exclusion

If you change your mind and want a previously excluded finding to appear in future scans:

1. Go to Profile → Finding Exclusions
2. Find the exclusion you want to remove
3. Click the Delete button to remove it

After removing an exclusion, similar findings will appear again in subsequent scans of that repository.

info

• Be specific: Only exclude findings that you're certain don't apply to your project
• Document your reasoning: Select the most accurate reason when excluding to help improve detection
• Review periodically: Check your exclusions list occasionally to ensure they're still relevant