Approval Inbox for Ignored and Snoozed Issues
The Request Inbox lets you require sign-off before users without ignore or snooze permissions can dismiss findings. Team members submit a request with a reason, and reviewers approve or reject it in a central inbox before anything is removed from the feed.
Use cases
🛡️ Governance over risk acceptance: Keep security leads in control of which findings get ignored.
👥 Empower developers: Let engineers triage false positives without handing out full ignore rights.
📋 Audit trail: Every request records who asked, why, and who approved or declined.
Enabling ignore/snooze requests
Ignore/snooze requests are not enabled by default. Only workspace admins can turn them on from the Triage settings. The same setting also lets users without snooze permissions submit snooze requests.
How it works
Whether you can ignore or snooze an issue directly depends on your ignore and snooze permissions (see Setting Roles and Permissions) and whether Allow Issue Ignore Requests is enabled for your workspace:
With the relevant permission: You ignore or snooze immediately.
Without it, with ignore requests enabled: You submit a request with a reason. The issue stays in the feed until someone with that permission approves or rejects it.
Without it, with ignore requests disabled: You cannot ignore or snooze findings, or submit requests.
The same flow applies when you reply @AikidoSec ignore: [reason] on an Aikido PR or MR comment. If you do not have ignore permissions, that request lands in the approval inbox rather than ignoring the finding immediately.
When a user submits a request, users with ignore permissions (except team-only users) are notified and can review it in the Request Inbox. The inbox lists the issue details, severity, location, requester, and their stated reason. Team-only users cannot review requests, even if they have ignore permissions.
Review requests
Open the inbox
Go to the Request Inbox, or click a pending notification in the Requests indicator in the top navigation. Open the Ignore Issues tab if it isn't already selected. The tab shows a badge with the number of pending requests.
Pending and handled
The Ignore Issues tab has two views:
Pending: Requests waiting for a decision.
Handled: Requests that have already been approved or rejected, including who reviewed them and when.
Use the search bar to filter by issue title or requester name. If you have a team filter active in Aikido, the inbox only shows requests for issues in that team.
What happens after a decision
Approved: Aikido applies the requested ignore or snooze using the requester's reason. Ignored findings move to the ignored view and disappear from the main feed.
Rejected: The issue stays open or snoozed in the feed. The requester can submit a new request if needed.
Notifications
Users with ignore permissions (except team-only users) see new requests in the Requests indicator in the top navigation. Each notification shows who submitted it and whether they asked to ignore or snooze. Click the notification, or Go to Request Inbox, to open the inbox.
Slack notifications
You can also receive Slack alerts when a new ignore or snooze request is submitted. Aikido posts a message to your chosen channel with a Review in Aikido button that links directly to the Request Inbox.
Connect Slack
If you haven't already, connect Slack from Slack integration settings. See Slack Notifications for setup steps.
Create a Slack alert
Go to the Request Inbox, open the Ignore Issues tab, and click Manage Alerts → Slack. Click Create Alert and select the channel that should receive request notifications.
Last updated
Was this helpful?