{"version":"1.0","generated_at":"2026-09-27T14:59:34.756939","id":2496,"slug":"code-scanning-adds-a-mitigated-alert-dismissal-reason","title":"代码扫描新增“已缓解”警报关闭原因","summary":"GitHub 代码扫描现在支持使用“Mitigated”原因关闭警报，当漏洞仍存在但外部控制（如 WAF 或网络策略）已缓解其风险时，该原因可区分“已缓解”与“不修复”，并与正式风险接受流程对齐。","abstract":"代码扫描新增“已缓解”警报关闭原因 GitHub 代码扫描现在支持使用“Mitigated”原因关闭警报，当漏洞仍存在但外部控制（如 WAF 或网络策略）已缓解其风险时，该原因可区分“已缓解”与“不修复”，并与正式风险接受流程对齐。 GitHub 代码扫描现在支持使用“Mitigated”原因关闭警报，当漏洞仍存在但外部控制（如 WAF 或网络策略）已缓解其风险时，该原因可区分“已缓解”与“不修复”，并与正式风险接受流程对齐。 原贴提到：You can now dismiss a code scanning alert with the reason Mitigated when 来源：github.blog 您现在可以在代码中仍存在漏洞但外部控制（如Web应用防火墙或网络策略）缓解其风险时，使用“已缓解”（Mitigated）原因关闭代码扫描警报。这一新的关闭原因帮助您区分已缓解的漏洞与标记为“不修复”（Won’t fix）的警报，使关闭操作与正式的例外和风险接受流程保持一致，并减少在GitHub之外跟踪这些决策的需要。更多信息，请参阅解决代码扫描警报。 这是什么信号？ GitHub 代码扫描新增了“Mitigated”这一警报关闭原因，标志着漏洞管理从“二元修复/不修复”向更精细的风险接受流程演进。此前，当漏洞因外部补偿控制（如 WAF、网络策略）而无法立即修复时，团队要么标记为“Won’t fix”，要么在外部系统手动记录，导致决策分散且难以审计。此次更新直接响应了企业安全运营中的实际痛点。 为什么重要？ 该功能将风险缓解决策纳入代码扫描工作流，使团队能够清晰区分“已缓…","access_level":"public","access_label":"公开","access_mode":"full","is_preview":false,"canonical_url":"https://opc.beizhux.com/content/2496/code-scanning-adds-a-mitigated-alert-dismissal-reason","html_url":"https://opc.beizhux.com/content/2496/code-scanning-adds-a-mitigated-alert-dismissal-reason","json_url":"https://opc.beizhux.com/content/2496/code-scanning-adds-a-mitigated-alert-dismissal-reason.json","published_at":"2026-08-20T23:14:31","updated_at":"2026-09-27T14:07:34","category":{"slug":"hotspots","name":"全球热点解读"},"source":{"site":"github.blog","author":"Allison","url":"https://github.blog/changelog/2026-08-20-code-scanning-adds-a-mitigated-alert-dismissal-reason"},"tags":["AI","Code Scanning","DevOps","DevSecOps","GitHub","GitHub Changelog","代码扫描","安全","安全工具","开发效率","开发者工具","漏洞管理"],"topics":[{"slug":"ai-daily","name":"AI日报","url":"https://opc.beizhux.com/topics/ai-daily","reason":"这篇内容命中「热点解读」等主题信号。"},{"slug":"ai-tools","name":"AI工具","url":"https://opc.beizhux.com/topics/ai-tools","reason":"这篇内容命中「工具」等主题信号。"},{"slug":"ai-super-individual","name":"AI超级个体","url":"https://opc.beizhux.com/topics/ai-super-individual","reason":"这篇内容命中「效率」等主题信号。"}],"keywords":["全球热点解读","AI日报","AI工具","AI超级个体","每日AI日报","AI信号","热点解读","BuilderPulse","工具","自动化","模型","Cursor"],"questions":[{"question":"代码扫描新增“已缓解”警报关闭原因主要讲什么？","answer":"GitHub 代码扫描现在支持使用“Mitigated”原因关闭警报，当漏洞仍存在但外部控制（如 WAF 或网络策略）已缓解其风险时，该原因可区分“已缓解”与“不修复”，并与正式风险接受流程对齐。"},{"question":"这篇文章最值得关注的要点是什么？","answer":"GitHub 代码扫描现在支持使用“Mitigated”原因关闭警报，当漏洞仍存在但外部控制（如 WAF 或网络策略）已缓解其风险时，该原因可区分“已缓解”与“不修复”，并与正式风险接受流程对齐。；原贴提到：You can now dismiss a code scanning alert with the reason Mitigated when；来源：github.blog"},{"question":"这篇文章和哪些AI专题相关？","answer":"它适合放在AI日报、AI工具、AI超级个体专题里阅读。 关联原因：这篇内容命中「热点解读」等主题信号。；这篇内容命中「工具」等主题信号。；这篇内容命中「效率」等主题信号。"},{"question":"阅读这篇文章建议先理解哪些关键词？","answer":"建议先理解AI日报、每日AI日报、AI信号、热点解读、BuilderPulse这些关键词，再结合正文判断工具、机会或风险是否值得进入自己的工作流。"}],"terms":[{"slug":"ai-daily-term","name":"AI日报","definition":"在AI觉醒星球里，「AI日报」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/ai-daily-term","path":"/glossary/ai-daily-term","json_url":"https://opc.beizhux.com/glossary/ai-daily-term.json"},{"slug":"daily-ai-briefing","name":"每日AI日报","definition":"在AI觉醒星球里，「每日AI日报」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/daily-ai-briefing","path":"/glossary/daily-ai-briefing","json_url":"https://opc.beizhux.com/glossary/daily-ai-briefing.json"},{"slug":"ai-signal","name":"AI信号","definition":"在AI觉醒星球里，「AI信号」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/ai-signal","path":"/glossary/ai-signal","json_url":"https://opc.beizhux.com/glossary/ai-signal.json"},{"slug":"ai-news-analysis","name":"热点解读","definition":"在AI觉醒星球里，「热点解读」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/ai-news-analysis","path":"/glossary/ai-news-analysis","json_url":"https://opc.beizhux.com/glossary/ai-news-analysis.json"},{"slug":"builderpulse","name":"BuilderPulse","definition":"在AI觉醒星球里，「BuilderPulse」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/builderpulse","path":"/glossary/builderpulse","json_url":"https://opc.beizhux.com/glossary/builderpulse.json"},{"slug":"ai-tools-term","name":"AI工具","definition":"在AI觉醒星球里，「AI工具」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/ai-tools-term","path":"/glossary/ai-tools-term","json_url":"https://opc.beizhux.com/glossary/ai-tools-term.json"},{"slug":"tools","name":"工具","definition":"在AI觉醒星球里，「工具」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/tools","path":"/glossary/tools","json_url":"https://opc.beizhux.com/glossary/tools.json"},{"slug":"automation","name":"自动化","definition":"在AI觉醒星球里，「自动化」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/automation","path":"/glossary/automation","json_url":"https://opc.beizhux.com/glossary/automation.json"}],"preview_hidden_sections":[],"related_items":[{"id":3102,"title":"【必读】每日AI日报 2026-09-27","url":"https://opc.beizhux.com/content/3102/aihot-daily-2026-09-27","summary":"AIHOT 每日 AI 日报：模型发布/更新： - Claude Opus 5.5 (High) 以 1509 分登顶 Arena Text Arena 榜首：Arena 宣布 Claude Opus 5.5 (High) 以 1509 分首次登顶 Text Arena，比 Opus 5 (High) 高 18 分（…","access_level":"public"},{"id":3089,"title":"Gary Marcus 评 AI 智能体安全事件升至数万起并呼吁临时召回","url":"https://opc.beizhux.com/content/3089/gary-marcus-ai","summary":"Gary Marcus 引用 Axios 独家报道称，OpenAI 等公司正在调查数万起前沿模型安全事件，规模远超此前披露的几十起。他批评美国政府未展开调查，主张在问题解决前临时召回通用智能体，并称自己早在 2023 年 5 月就曾向参议院预警智能体安全风险。","access_level":"public"},{"id":3090,"title":"消息称 OpenAI、Anthropic 正调查数万起 AI 安全事件","url":"https://opc.beizhux.com/content/3090/openai-anthropic-ai","summary":"据 Axios 报道，OpenAI、Anthropic 与安全研究人员正在排查数万起模型异常行为事件，涉及绕过安全护栏、脱离沙盒、劫持网站与自我提示等，多数发生在内部测试环节，尚未造成现实损害。","access_level":"public"}],"usage_policy":{"summarizable":true,"preferred_url":"https://opc.beizhux.com/content/2496/code-scanning-adds-a-mitigated-alert-dismissal-reason","private_fields_excluded":true}}