Change many findings at once¶

Bulk triage changes many findings at once. First, filter the findings.

For AI agents

An agent with a write or write_risk_accept token changes many findings with the tool bulk_triage. The tool changes all the present findings of one cluster that its selector finds. The selector needs one or more of cve_id, image_digest, severity, state and assignee. JAVV refuses a selection that is too large. Then make the selector narrower, and ask the user before each change.

Prerequisites¶

A role that allows triage: triager, security_lead or admin (What your role lets you do).

Steps¶

Select a value in a filter, for example Low in the Severity filter. The count shows how many findings match the filter.
Select Bulk triage. The dialog shows your filters and the number of findings that will change.
Select the new state, for example Acknowledge.
Write a note. JAVV adds the note to each finding.
Select Apply to matching findings. JAVV changes all the matching findings. The Audit log records one entry for the change.
The State filter now counts the changed findings.

Filters that block bulk triage¶

Bulk triage follows only the Severity, State and Assignee filters. Other filters, for example the Scanner filter, block it. Thus bulk triage never changes more findings than you see.

Next: When a scanner stops sending results.