Measured

Which rules teams silence

Every scan that opts into telemetry sends the rule ids that fired and the ones the team had silenced in .gatetestignore — integers per rule id, never code, paths or repository names. A silenced rule is a rule someone judged not worth acting on in their codebase. That is the closest thing to a false-positive rate a scanner can publish without reading customers’ code, so it is published, rule by rule, worst first.