Code scanning adds a mitigated alert dismissal reason
GitHub Code scanning now offers a "Mitigated" reason for dismissing security alerts. This option is designed for vulnerabilities where the risk is reduced by external controls, such as web application firewalls or network policies. It helps users distinguish these issues from "Won't fix" alerts and align with formal exception and risk-acceptance processes. The enhancement aims to streamline vulnerability management by reducing the need for external tracking.
Features (1) ›
- Add 'Mitigated' dismissal reason to Code scanning alerts
Users can now dismiss Code scanning alerts with a 'Mitigated' reason, specifically for vulnerabilities whose risk is reduced by external controls like web application firewalls or network policies. This new reason aids in distinguishing mitigated issues from 'Won't fix' alerts and helps align with formal risk exception processes, reducing external tracking.
https://github.blog/changelog/2026-08-20-code-scanning-adds-a-mitigated-alert-dismissal-reason
Related releases
- GitHub improves tools for managing blocked users GitHub Changelog ·
- Shared agentic work with GitHub Copilot in Microsoft Teams GitHub Changelog ·
- GitHub Copilot Integrates with Slack for Agentic Development Workflows GitHub Changelog ·
- GitHub's Issues Sidebar Now Supports Pinned Views, Plus Other Enhancements GitHub Changelog ·
- Windows 11 ARM64 VS2026 image generally available for GitHub Actions GitHub Changelog ·
- Dedicated GitHub Actions Path for Code Quality is Generally Available GitHub Changelog ·