> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/sast-and-sca/prezero/tutorials/suppress-findings.md).

# Suppressing findings based on defined patterns

Qwiet allows you to suppress findings, removing them from inclusion with the remaining vulnerabilities, on a per-scan basis (completed scans are unaffected). This can be helpful if there are findings you consider false positives.

> See [sl remediation](broken://spaces/4t03gua31tHpZwtcczPO/pages/axXKXndD2cEAXx8mVvKB) for detailed CLI information.

1. Run `sl remediation config <filename>.yaml` to create a sample config file that you can modify:

   ```prism-code
   # Example analysis remediation config
   methods:
   # - method: org.slf4j.Logger.info:void(java.lang.String,java.lang.Object)
   #   tags:
   #     - key: category
   #       value: Sensitive Data Leak
   # - pattern: Logger.debug
   #   tags:
   #     - key: category
   #       value: Sensitive Data Leak
   ```

   ![](/files/DfHDmRpYn5HJOmhRtTva) ![](/files/P5vj8JOtHNJWVEvAqKym)

   You can specify the exact methods or patterns that you want Qwiet to identify. You can also modify the specified methods or patterns using tags, and only results that match all of the criteria (i.e., matches the method and all tags) will be returned.

   If you'd like to match all findings of a category, you can provide `.*`. For example, to match all header injection findings:

   ```prism-code
   methods: 
     - pattern: ".*"
       tags: 
         - key: category
           value: Header Injection
   ```

   ![](/files/DfHDmRpYn5HJOmhRtTva) ![](/files/P5vj8JOtHNJWVEvAqKym)
2. Add the methods you want Qwiet to identify and suppress to the configuration file you generated. You can test the changes you make using the `dry-run` command option:

   ```prism-code
   sl remediation dry-run --config <filename>.yaml --app <yourApplication>`
   ```

   ![](/files/DfHDmRpYn5HJOmhRtTva) ![](/files/P5vj8JOtHNJWVEvAqKym)

   Doing so will print the methods Qwiet has identified as matching the parameters you defined to the command line.

   When you are finished making changes, save your config file.
3. To run your scans using the configuration file you defined, include the `--remediation-config` flag:

   ```prism-code
   sl analyze --app <yourApplication> --remediation-config example.yaml --java <path-to-target>`
   ```

   ![](/files/CRrxFX9wuboXxDrdB2dv) ![](/files/DfHDmRpYn5HJOmhRtTva) ![](/files/P5vj8JOtHNJWVEvAqKym)

## Reverting changes <a href="#reverting-changes" id="reverting-changes"></a>

You can undo any changes by updating or removing the configuration file. Subsequent scans will show the findings restored.