Mark as a false positive in Container Vulnerability Response

task brazil Updated Sep 10, 2026 1 min read raise-fp-request-cvr.md

Mark a container vulnerable item (CVIT) or remediation task as a false positive if the warning given by the scanner is not actually an issue. For example, if a CVIT has been decommissioned but the scanner is still raising an issue related to it, mark it as a false positive.

Important: As a Vulnerability analyst and remediation owner, you can request false positives from the Vulnerability Manager Workspace and IT Remediation Workspace respectively.

Before you begin

Role required: remediation owner

Procedure

Navigate to All > Container Vulnerability Response (or Remediation Tasks) > All.
Open the CVIT you want to mark as a false positive and click Mark as False Positive.

The CVIT must be in an Open state.
On the False Positive form, enter details in Additional information and click Request Approval.

The request is sent for approval and the State of the CVIT changes to In Review. Both the requester and approver are notified via email.

Parent Topic:Marking and approving a false positive container vulnerability item

40 lines · 2.5 KB Wrap lines

---
title: Mark as a false positive in Container Vulnerability Response
description: Mark a container vulnerable item \(CVIT\) or remediation task as a false positive if the warning given by the scanner is not actually an issue. For example, if a CVIT has been decommissioned but the scanner is still raising an issue related to it, mark it as a false positive.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/container-vulnerability-response/raise-fp-request-cvr.html
release: brazil
product: Container Vulnerability Response
classification: container-vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Marking and approving a false positive container vulnerability item, Exception management in Container Vulnerability Response, Use, Container Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Mark as a false positive in Container Vulnerability Response

Mark a container vulnerable item \(CVIT\) or remediation task as a false positive if the warning given by the scanner is not actually an issue. For example, if a CVIT has been decommissioned but the scanner is still raising an issue related to it, mark it as a false positive.

**Important:** As a Vulnerability analyst and remediation owner, you can request false positives from the [Vulnerability Manager Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-manager-workspace/vr-ws-exceptions-split-VMGR-ws.md) and [IT Remediation Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/it-remediation-workspace/vr-ws-mark-fp.md) respectively.

## Before you begin

Role required: remediation owner

## Procedure

1. Navigate to **All** &gt; **Container Vulnerability Response \(or Remediation Tasks\)** &gt; **All**.

2. Open the CVIT you want to mark as a false positive and click **Mark as False Positive**.

The CVIT must be in an **Open** state.

3. On the False Positive form, enter details in **Additional information** and click **Request Approval**.

The request is sent for approval and the State of the CVIT changes to **In Review**. Both the requester and approver are notified via email.

**Parent Topic:**[Marking and approving a false positive container vulnerability item](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/container-vulnerability-response/request-approve-fp-cvr.md)