Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Ignoring findings
It is possible to ignore some blocker findings (e.g. false positive) by providing
a
resc-ignore.dsv
file. The bockers will be downgraded to a warning level and marked as ignored. Such file has the following structure:finding_path
contains the path to the file with the blocking finding.finding_rule
contains the name of the blocking rule.finding_line_number
contains the line number of the finding.expiration_date
is optional, contains the date in ISO 8601 format until which this ignore rule should be considered valid.For example, if we want to ignore the finding in file
/etc/passwd
for ruleroot_value_found
on line1
until April 1st 2024 at 23:59 the following line should be used.To ignore this finding ad vitam aeternam: