> For the complete documentation index, see [llms.txt](https://docs.sealsecurity.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sealsecurity.io/discovering/protection-page/scanner-exclusions-tab.md).

# The Scanner exclusions tab

A **Scanner Exclusion** is a rule that tells Seal to [rename](/integrations/package-renaming.md) a particular package and version in your build so that external scanners stop flagging it as vulnerable. The mechanic is the same as for renaming applied to sealed packages: scanners look up vulnerabilities by package name, and a renamed package has no entries in their databases, so the alert stops.

Scanner Exclusions are aimed at false positives that come from scanners other people run on your output: most often your customers' scanners on the artifacts you ship to them. Those alerts can drive significant pressure to "upgrade" packages that are not actually vulnerable (the underlying CVE was retracted, the affected-version range is wrong, the vulnerable code never compiles into the package, and so on).

Scanner Exclusions are applied by the Seal CLI when it runs in your CI/CD pipeline, the same way Sealing Rules are. A deployment method that does not run the CLI in CI (Artifact Server, Manual) cannot apply Scanner Exclusions.

The feature is hidden until an Admin enables it from Settings. Once enabled, the Scanner exclusions tab and the related actions appear across the platform.

The full concept-and-how-to home for Scanner Exclusions is in [Scanner Exclusions](/using-platform/scanner-exclusions.md). This page is just the field reference for the list view.

<figure><img src="/files/TqTtyfRBWDVUYOUTvg7u" alt="The Scanner exclusions tab populated with rows and a row menu open"><figcaption><p>The Scanner exclusions tab with tenant-wide and project-specific rules and an Edit/Delete row menu open.</p></figcaption></figure>

## Columns

| Column              | Contents                                                                                                                       |
| ------------------- | ------------------------------------------------------------------------------------------------------------------------------ |
| *(scope indicator)* | An icon that marks the exclusion as **tenant-wide** (applies to every Seal Project). Project-specific exclusions show no icon. |
| **Package**         | The package the exclusion targets.                                                                                             |
| **Ecosystem**       | The package's ecosystem.                                                                                                       |
| **Version**         | The version the exclusion applies to.                                                                                          |
| **Project**         | The Seal Project the exclusion applies to, or "All projects" for tenant-wide exclusions.                                       |
| **User**            | The user who created the exclusion.                                                                                            |
| **Last updated**    | When the exclusion was last modified.                                                                                          |

The default sort is by **creation time, descending**.

## Filters

* **Search**: free-text search across package names.
* **Project**: show only exclusions for a single Seal Project, or exclusions that apply to all projects. The picker lists only projects that can take a remote Sealing Rule (those on the **Remote** deployment method, plus connected projects whose deployment method is not yet determined). Projects on the **Local**, **Automatic Remediation**, **Artifact Server**, or **Manual** deployment method do not appear.

## Per-row actions

| Action          | Roles         |
| --------------- | ------------- |
| **Edit rule**   | Admin, Sealer |
| **Delete rule** | Admin, Sealer |

## Related

* [Scanner Exclusions](/using-platform/scanner-exclusions.md): the canonical home for the concept, the create flow, and the comparison with [package renaming](/integrations/package-renaming.md).