medium10 pts · first answer countsdevsecopssast

Handling a SAST false positive

SAST flags a SQL injection, but you confirm the input is an enum validated against a fixed list. The finding blocks the PR. What is the right way to handle it?

A.Disable the SQL injection rule for the whole repoB.Remove the SAST step from the pipelineC.Merge with admin rights to skip the checkD.Suppress that one finding inline with a written reason

Discussion 0

Join free to post in the discussion.

Handling a SAST false positive

Discussion 0

Related questions