Finding Acknowledgements

Sometimes Codity flags something you've already considered and decided to keep, or a valid finding you don't want to fix in the current PR. Reply to the finding with @codity and Codity remembers your decision, so it doesn't repeat the same comment on future reviews.

Overview

Reply directly on a Codity inline finding comment. Codity classifies your reply into one of three categories:

Reply typeExampleWhat happens
Question@codity what is a TOCTOU?Answered normally. Nothing is stored.
Repo-level acknowledgement@codity this is intentional. We have this loophole for testingRemembered for every future PR in this repository.
PR-only deferral@codity nice catch but not solving this issue in this PRRemembered only for re-reviews of this PR. Not applied elsewhere.

How It Works

Repo-level acknowledgement

Use this when a finding is intentional or an accepted risk for the whole codebase — for example, a deliberate test-only shortcut.

@codity this is intentional. We have this loophole for testing

Codity replies:

Acknowledged. I'll remember this finding for future reviews in this repository.

From then on, Codity won't raise that same finding again in this repository — on this PR or any future one.

PR-only deferral

Use this when a finding is valid but you're intentionally not fixing it in this PR.

@codity nice catch but not solving this issue in this PR

Codity replies:

Acknowledged. I'll treat this finding as deferred for re-reviews of this PR only.

The finding is suppressed for the rest of this PR's re-reviews, but it will be raised again if it shows up in a different PR. Once the PR is closed, the deferral is cleared.

When Codity can't match your reply

If Codity can't tell which finding you're acknowledging, it lets you know instead of guessing:

I saw the acknowledgement, but I couldn't match it to a specific finding. Please reply directly on the finding comment so I can remember the right issue.
I saw the acknowledgement, but I can only remember findings after a review has run on this PR.

Scope Rules

  • Repo-level memory applies to every PR in the same repository. It does not carry over to other repositories.
  • PR-only memory applies only to re-reviews of the PR where you replied. It expires when the PR closes.
  • Memory is only ever applied to the same finding (same file, location, and issue), it doesn't suppress unrelated findings nearby.

Additional Resources