Manage vulnerability noise at scale with auto-dismiss policies

What this post added

Introduced auto-dismiss vulnerability policies, a new capability that allows users to define rules for automatically dismissing security findings. These policies can be configured based on file path, directory, or vulnerability identifier (CVE, CWE) and are applied on default-branch pipelines. The post details the 'why' and 'how' of auto-dismiss policies, provides use cases with ready-to-use configurations (e.g., dismissing test code vulnerabilities, vendored code, known false positives, generated code, infrastructure-mitigated vulnerabilities, and CVE families), and outlines a quick reference for parameters and limits. It also provides a getting started guide.