AI Auto Dismissal
A rule can match code that looks like a violation but is not, in context. AI Auto Dismissal runs after a scan flags a violation, and checks it again before the finding reaches your issue inbox.
The dismissal checks three things:
Applicability - does the flagged file's role make the rule's control possible at all?
Reachability - who can reach the flagged code at runtime?
Mitigations - does an existing control upstream already handle this?
What happens to the finding
| Result | What you see |
|---|---|
| No applicability, reachability, or mitigation issue found | Surfaces normally for triage |
| A mitigation reduces but does not remove the risk | Surfaces with a lower severity |
| AI Auto Dismissal cannot reach a confident answer | Surfaces normally for triage |
| AI Auto Dismissal finds a citable reason the finding is not exploitable, with high confidence | Auto-dismissed |
Auto-dismissed findings
Dam Secure dismisses a sub-issue automatically when AI Auto Dismissal finds a citable reason it is not exploitable, and its confidence in that reason is high. These are marked in the Issues view.
If you disagree with an auto-dismissal, restore it the same way you restore any other dismissed sub-issue. See Triaging Sub-issues.