Configuring rules for ignoring detected risks can be set at multiple levels:
Edit this page on GitHub