Hiding false positives, revoked credentials, etc.

Sometimes, Security for Jira will find false positives, credentials which have already been revoked, etc. If this happens, you can review the finding. This marks the finding, as well as any other findings which exactly match it, as reviewed in the current and future scans.

Reviewing a finding from the Security Analysis

Marking and unmarking findings reviewed is an audited event.

Click the Mark reviewed button on the finding you want to review. This opens a confirmation window.

Marking a finding as reviewed saves the exact string captured by the rule (in this case,
AKIAIO5FODNN7EXAMPLE). That exact string will be marked as reviewed for all existing and future scans.

After the finding is marked as reviewed, all other findings of that exact string will disappear from the Security Analysis.

Reviewed findings can be shown again with the Show reviewed toggle, where they can also be unmarked.

Note that reviewed findings are scoped to a project. Identical findings across multiple projects must be reviewed separately.

Exporting reviewed false positives

Information about text which is marked reviewed, such as who reviewed it and when, may be exported from the Security Analysis by clicking “Export Project” and then “Reviewed False Positives”.

Note that reviewed false positives are stored independently of any findings. In other words, after clicking “Mark Reviewed” on a finding, that text persists and marks all future matching results as reviewed, even if the original finding is deleted.

You can also export reviewed false positives in all your spaces from the Soteri Dashboard.

For more details about exporting findings, see Exporting Findings .