PI-2420 Attempt to fix false positive

ministryofjustice · Aug 9, 2024 · f6917c2 · f6917c2
1 parent 1780cef
commit f6917c2
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/.zap/autorun.yml b/.zap/autorun.yml
@@ -33,6 +33,12 @@ env:
     progressToStdout: true
 
 jobs:
+  - type: alertFilter
+    alertFilters:
+      # PII Disclosure - https://www.zaproxy.org/docs/alerts/10062/
+      # Script tag "nonce" attribute can be mistaken for a credit card number
+      - ruleId: 10062
+        newRisk: "Info"
   - type: spider
     parameters:
       context: "HMPPSAuth"
@@ -54,10 +60,6 @@ jobs:
       type: "standalone"
       engine: ""
       name: "traverse.js"
-  - type: alertFilter
-    alertFilters:
-      - ruleId: 10062 # PII Disclosure - https://www.zaproxy.org/docs/alerts/10062/
-        newRisk: False Positive # Script tag "nonce" attribute can be mistaken for a credit card number
   - type: activeScan
     parameters:
       context: "HMPPSAuth"