I was wondering when dealing with the OpenVex , that we can put Vulnerabilites under "not_affected" status while providing a justification.
In specific cases like a False Positive , this feature is really useful.
But for cases where we simply want to declare a temporary exception, the five sub categories of justification sometimes don't align with the real reason why we put the vulnerability into exception.
So I was wondering if there were any way of showing the vulnerability as an exception for another reason than the ones in option. Or if you had idea of how to manage this issue or how you're doing it
Thanks
