After addressing a high-severity Code Scanning alert, what is the recommended final step?

• A. Dismiss the alert and keep it open
• B. Remove the file from the repository
• C. Disable Code Scanning for the repository
• D. Remediate, then close the alert

Answer: (D)

After addressing a high-severity Code Scanning alert, the final step is to fix the underlying issue and then close the alert once the fix is verified. This keeps the alert status accurate, signals to the team that the risk has been mitigated, and provides a traceable record of what was changed and why. It’s important to re-run the scan or review the changes in a pull request to confirm the remediation actually resolves the vulnerability before closing. Dismissing the alert and keeping it open, removing the file, or disabling Code Scanning all undermine security visibility and protection, whereas remediating and then closing ensures proper triage and accountability.