Exclusions

Overview

The Exclusions page displays a summary of all applications, issues, detection rules, and policies ("entities") manually marked as irrelevant or excluded from scans. These entities will be excluded from all future scans unless the exclusion is removed.

  • See the table below for a detailed list of entity types that can appear on the Exclusions page.

Removing an exclusion (and other actions)

From the Exclusions page, you can remove an entity's exclusion (so that it is considered in future scans) and perform other actions depending on the entity type.

  • See the table below for the actions that can be performed on the Exclusions page for each entity type.

To remove an entity's exclusion or perform other actions:

  1. Click the Actions icon on the far right side of the entity's row.

  2. Select the action you want to perform.

  3. In the dialog, confirm that you want to perform the action.

Entity types and available actions

Entity type
Details
Actions available from the Exclusions page

Applications

The Exclusions page displays only applications manually marked as irrelevant from the Applications or Issues pages.

  • Not listed: Applications automatically determined by OX to be irrelevant. (These applications can be seen and managed on the Irrelevant applications page.)

  • Make app relevant: always

    • The app is included in all future scans

  • Make app relevant: OX dynamic

    • The app is included in future scans unless is automatically determined by OX to be irrelevant

See the note below for additional information about what makes an app irrelevant.

Issues

The Exclusions page displays issues excluded from the Issues page.

  • Remove exclusion

  • Update exclusion expiry date

    • Allows you add an expiration date to an excluded issue without one

    • Allows you to change the expiration date of an excluded issue with one

  • Remove snooze

    • Option is available only if the excluded issue currently has an expiration date

Detection rules

The Exclusions page displays detection rules excluded from the Issues page:

  • For a single app

  • For all apps

  • Remove exclusion

  • Update exclusion expiry date

    • Allows you add an expiration date to an excluded detection rule without one

    • Allows you to change the expiration date of an excluded detection rule with one

    • Remove snooze

      • Option is available only if the excluded detection rule currently has an expiration date

Policies

The Exclusions page displays policies excluded from the Issues page.

  • Not listed: Policies that have been turned off from the Policies page. (These applications can be seen and managed on the Policies page).

  • Enable policy

What makes an app irrelevant?

OX automatically designates an app as irrelevant when:

  • The app's repo has been archived

  • The app is inaccessible for cloning

  • No relevant files are identified in the repo

  • There have been no code changes during the past 6 months

Last updated