github GitHub Changelog ·

Code scanning adds a mitigated alert dismissal reason

securitygaengineer
feature

GitHub Code scanning now offers a "Mitigated" reason for dismissing security alerts. This option is designed for vulnerabilities where the risk is reduced by external controls, such as web application firewalls or network policies. It helps users distinguish these issues from "Won't fix" alerts and align with formal exception and risk-acceptance processes. The enhancement aims to streamline vulnerability management by reducing the need for external tracking.

Features (1)
  • Add 'Mitigated' dismissal reason to Code scanning alerts

    Users can now dismiss Code scanning alerts with a 'Mitigated' reason, specifically for vulnerabilities whose risk is reduced by external controls like web application firewalls or network policies. This new reason aids in distinguishing mitigated issues from 'Won't fix' alerts and helps align with formal risk exception processes, reducing external tracking.

Read the original announcement →

https://github.blog/changelog/2026-08-20-code-scanning-adds-a-mitigated-alert-dismissal-reason

Related releases