.svg)
Every developer has been there: You push your code, the scanner runs, and your PR checks light up with new alerts. You instinctively know you are not going to fix all of them, so you start looking for noise to ignore.
That “unused variable” is actually a required parameter in a framework callback that would break your app if you “fixed” it. That “hardcoded secret” turns out to be an API key for a test environment.
But the real problem is not the time wasted sifting through false positives. It’s the alert fatigue that slowly trains developers to work around them. When the noise starts drowning out genuine findings, devs start to give up on the system.
It’s only a matter of time until a real critical issue ends up being ignored and makes it to production.
We know the pain. So we decided to fix it.
Introducing: Smart False Positive Triage
Today, we are launching Smart False Positive Triage to do the boring work of weeding out the junk for you. This is available to all Business plan customers who decide to opt in.
Instead of just matching static patterns, our engine now analyzes the full context of the code during a Pull Request. It looks at the broader code around the issue and the file itself to determine if it’s a false alarm or a real problem.
Here’s how it works:
- You open a Pull Request
- Codacy scans your code changes for security and quality issues
- Our context-aware AI engine then flags potential false positives directly in the PR, so you can triage them easily.
Not a Black Box: You’re in Full Control
We don’t automatically close issues and hope for the best. We triage so you can decide which issues really deserve your time and attention.
We Flag It: When we find something that’s likely a false positive, we tag it in the UI and drop a comment in your PR. We give you a plain-English reason why we think it's junk.
You Decide: You can see all the flagged issues at a glance. Agree with our assessment? Hit the "Ignore all" button and watch them disappear. Disagree? One click removes the flag. You always have the final say.
How to Get Access
Smart False Positive Triage is available today for all Business plan customers on an opt-in basis.
If you are interested in enabling or testing this feature for your organization, please submit your request below:
