For AI agents: The documentation index is at https://docs.digitalocean.com/llms.txt. Markdown versions of pages use the same URL with index.html.md in place of the HTML page (for example, append index.html.md to the directory path instead of opening the HTML document).

CSPM allows you to suppress findings that are not relevant to your environment. Suppression helps you reduce noise and focus on issues that require action, but it does not resolve the underlying issue.

What Suppression Does

Suppressing a finding removes it from your active findings view. This allows you to ignore findings that are expected or acceptable, focus on higher-priority issues, and keep your findings list manageable.

What Suppression Does Not Do

Suppressing a finding does not change the resource configuration or remove the risk condition. The resource continues to be evaluated in future scans, and the risk condition still exists. Suppression should only be used when you understand the risk and have decided that no action is required.

When to Use Suppression

Suppression is appropriate when a finding is valid but not actionable. Examples include a resource that is intentionally configured in a way that triggers a rule, a known exception for a specific workload, or an accepted risk based on your environment or use case. For example, a publicly readable Spaces bucket may be expected if it hosts static website assets.

How Suppression Works

Suppression is applied at the finding level to a specific finding and resource combination. When you suppress a finding, it is removed from your active findings list and does not appear in future scan results unless you remove the suppression. Other findings under the same issue are not affected.

Suppression and Scans

Suppressed findings are still evaluated during scans. If the underlying issue still exists, the finding remains suppressed. If the issue is resolved, the finding is no longer generated in future scans. If you remove suppression and the issue still exists, the finding appears again.

Plan Availability

Suppression is available only in paid plans. In the free plan, all findings remain visible until they are resolved.