---
title: Marking and approving a false positive container vulnerability item
description: Container Vulnerable items \(CVITs\) and remediation tasks \(VULs\) can be marked as false positives. Approvers with write access can approve such requests from other users.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/container-vulnerability-response/request-approve-fp-cvr.html
release: australia
product: Container Vulnerability Response
classification: container-vulnerability-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 3
breadcrumb: [Exception management in Container Vulnerability Response, Use, Container Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Marking and approving a false positive container vulnerability item

Container Vulnerable items \(CVITs\) and remediation tasks \(VULs\) can be marked as false positives. Approvers with write access can approve such requests from other users.

-   [Mark as a false positive in Container Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/container-vulnerability-response/raise-fp-request-cvr.md)
-   [Approve a false positive](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/container-vulnerability-response/approve-fp-request-cvr.md)

**Note:**

Email notifications are sent at every stage of the false positive workflow, providing the status and other details of a request. For example, when a CVIT or remediation task is marked as a false positive, the requester receives a confirmation email. Simultaneously, the approver receives an email stating that a CVIT or remediation task has been marked as a false positive. Starting from v2.5 of Container Vulnerability Response, you can configure the time frames for approving false positives and exceptions, along with email notifications for both the approver and requester after a set number of days. When a request is raised, the container vulnerable item changes to In-Review status and a state change record is created. If the approver doesn't respond within the configured time frame, the container vulnerable item or remediation task reverts to Open status. The previous state is stored in the **backup\_state** field. For more information, see [Configure approval rules for Exception Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/container-vulnerability-response/cvr-exception-mgt-approval-rules.md).

**Important:** As a Vulnerability analyst and remediation owner, you can request and approve false positives from the [Vulnerability Manager Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-manager-workspace/vr-ws-exceptions-split-VMGR-ws.md) and [IT Remediation Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/it-remediation-workspace/vr-ws-mark-fp.md) respectively.

-   **[Mark as a false positive in Container Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/container-vulnerability-response/raise-fp-request-cvr.md)**  
Mark a container vulnerable item \(CVIT\) or remediation task as a false positive if the warning given by the scanner is not actually an issue. For example, if a CVIT has been decommissioned but the scanner is still raising an issue related to it, mark it as a false positive.
-   **[Approve a false positive](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/container-vulnerability-response/approve-fp-request-cvr.md)**  
As a false positive approver, you can approve false positive requests from other users.

**Parent Topic:**[Exception management in Container Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/container-vulnerability-response/cvr-exception-management.md)