Troubleshooting
False positives
What to do when a finding isn't reproducible.
Talos captures a full trace of every attempt. Re-run a single finding with talos-scan replay <finding-id>. If it still fails to reproduce, file an issue with the trace bundle attached.
Suppressing a known false positive
Add the finding ID to .talos-ignore at the root of your repo. Suppressions must include a reason and an owner.
.talos-ignore
# format: <finding-id> <owner> <reason>F-014 @sec-team compensating control at the API gateway
Tuning the confidence threshold
Lower-confidence findings can be filtered globally with --min-confidence 0.8. This is safer than suppressing individual IDs long-term.