Cut Through the Noise: Introducing Smart False Positive Triage

Every developer knows it: You push your code, the scanner runs, and your PR checks light up with a dozen “critical issues”. After spending some time digging, you realize there is as much noise as there is signal, if not more.

That “unused variable” is actually a required parameter in a framework callback that would break your app if you “fixed” it. That “hardcoded secret” turns out to be an API key for a test environment.

But the real problem is not the time wasted sifting through this noise, it’s the alert fatigue that slowly trains developers to work around it. When most alerts are false positives, devs simply give up on the system. 

It’s only a matter of time until a real critical issue ends up being ignored and makes it to production.

We know the pain. So we decided to fix it.

Introducing: Smart False Positive Triage

Today, we are launching Smart False Positive Triage to do the boring work of weeding out the junk for you. This is available to all Business plan customers who decide to opt in.

Instead of just matching static patterns, our engine now analyzes the full context of the code during a Pull Request. It looks at the broader code around the issue and the file itself to determine if it’s a false alarm or a real problem.

Here’s how it works:

1. You open a Pull Request
2. Codacy scans your code changes for security and quality issues
3. Our context-aware AI engine then flags potential false positives directly in the PR, so you can triage them easily.
   
   

Not a Black Box: You’re in Full Control

We don’t automatically close issues and hope for the best. We triage so you can decide which issues really deserve your time and attention.

We Flag It: When we find something that’s likely a false positive, we tag it in the UI and drop a comment in your PR. We give you a plain-English reason why we think it's junk.

You Decide: You can see all the flagged issues at a glance. Agree with our assessment? Hit the "Ignore all" button and watch them disappear. Disagree? One click removes the flag. You always have the final say.

How to Get Access

Smart False Positive Triage is available today for all Business plan customers on an opt-in basis. 

If you are interested in enabling or testing this feature for your organization, please submit your request below: