Skip to main content

Approve or reject SCA mitigations

You can approve or reject mitigations that members of your team propose for component licenses or vulnerabilities.

Before you begin:

You must have the Mitigation Approver role.

To complete this task:

  1. In the application profile, select Mitigations from the left pane.

  2. Select Mitigated Component Licenses or Mitigated Component Vulnerabilities.

  3. Under Proposed, select one or more vulnerabilities or licenses on which you want to take action.

  4. Select one of these actions:

    • Approve to accept the proposed mitigation.
    • Reject to reject the proposed mitigation.
    • Comment to enter additional information about the proposed mitigation. You must enter a comment when you approve or reject mitigations.
  5. Select Continue.

Next steps:

To view the mitigation history of a component, select History on the Component Profile.

You can also view component mitigation information by severity from Third-Party Components. Hover over findings with an asterisk to view a tooltip with mitigation information.