Accept a risk
Navigate to Secure release > Repository tab.
Select repository name.
Select the Releases tab and select the release for which you want to re-evalute risk decision.
Select the Vulnerabilites tab.
Locate the vulnerability for which you want to re-evalute the Risk accepted decision.
Alternately, you can also navigate to Secure release> Monitoring dashboard > Vulnerabilities. . Locate the vulnerability with the Risk accepted decision. You can use the search functionality and configure the displayed columns to help locate the vulnerability. Select the alert name to open the vulnerability details.
For a vulnerability with a Not yet reviewed or Pending review decision:
Locate the vulnerability for which you want to accept the risk after reviewing its details.
Select Action > Accept risk and provide the required justification for accepting the risk.
In the Accept risk dialog, provide the following information:
Technical justification – Enter the technical reason for accepting the vulnerability risk. This field is required.
Business rationale – Enter the business reason for accepting the risk.
Suppress future scans for this vulnerability – Select this option if you do not want the vulnerability to appear in future scans during the suppression period.
Expiry/Revalidate date – If suppression is enabled, specify the date until which the suppression remains valid.
Accept the risk.
Review the information and select Accept risk. The risk decision changes to Risk accepted.
注記
For a vulnerability with a Risk accepted decision, use the available actions to Reassign, Mark as invalid, or Accept risk (re-evalute) again to re-evaluate the existing decision. When re-evaluating the risk, review and update the previously entered acceptance details as required
Open the vulnerability's Audit trail to review the recorded risk decision actions and changes associated with the vulnerability.