ZAP Flagging false positives in reports so that they can be dealt with at a later time
brown test
When we first generated our reports, we would see the number of instances. For some of these, we will not be able to update them before the end of the year
So we are using the global Alerts to identify the risk level of the alerts we will review in the new year. We are changing them to False Positives. These include low, mediums and even some High Alerts that we will fix at a later time but don't need to review in this current year.
When we generate the new report, we are expecting that any alerts tagged as false positive won’t be listed and any “new” alerts under that section would be.
However, what is happening, we still see the alerts and they are now labeled systemic. We don’t want them to be listed at all on the reports for the current year, but we don’t want to hide the risk level in case future alerts under that risk level would be identified. How do we make these alerts hide until we are ready to deal with them