risk

1 post · all writing

• The ignore file is where security programs go to die

  August 7, 2026 · Wilson Santos

  Every scanner ships a way to make findings disappear, and every team uses it. The problem is not that risk gets accepted. It always does, but that the record of who accepted it, and why, and until when, does not survive the commit that added the line.