- Introduce a new "Mitigated" dismissal reason for code scanning alerts, enabling dismissal when external controls reduce risk.
- Allows teams to document that a vulnerability remains in code but is mitigated by measures such as a WAF or network controls.