Triage findings: fixed, false positive and risk accepted

Octopoda tracks each finding from the scan that first proved it until it is fixed or you decide not to fix it. This page explains the statuses, what changes them, and how to triage several findings at once.

​

Statuses

A finding that a later scan proves again stays the same finding: its history shows each scan that saw it.

​

How findings are re-tested

A full code scan re-tests the findings that are still new or open in the same code, up to 30 per scan:

• a scan of a repository’s default branch re-tests that repository’s findings;
• a scan from the CLI or an AI tool re-tests the findings from earlier scans of the same project folder, recognized by the folder’s name.

Each finding the scan can no longer reproduce is marked Fixed, and its page links to that scan. Pull request scans, and scans of other branches, report what they prove but do not close findings. See Fix a finding with your AI tool.

​

Mark a false positive or accept a risk

Anyone on the team can triage findings. To undo a decision, reopen the finding.

​

Triage several findings at once

On the Findings page, select the findings with their checkboxes, then choose a status for all of them. The same reason is recorded on each.